Reduce https and TLS connection discussion to normative references to TLS 1.3

[royfielding]

We have imported RFC2818, but we still have to reduce the normative text to stuff that isn't already defined by TLS13 (and just add normative references to them as needed).

[royfielding]

Wow, actually, TLS13 left this for us to define as being application-specific.

[mnot]

Which parts? Do you mean early data?

[royfielding]

I mean things like what is the authority, how to compare against certificate, how to validate certificate, and when it's okay to proceed. We may have completed this with my big patch in February.

[mnot]

Discussed; @reschke and @mnot to review, if we don't find any leftover text that's redundant can close. E.g., 5.4.3.

[royfielding]

Do we still need 2818 stuff in https://httpwg.org/http-core/draft-ietf-httpbis-semantics-latest.html#https.initiation

[reschke]

Maybe we could ask EKR for review?

[mnot]

@ekr?

[ekr]

Sorry, I'm kind of missing context. Is the situation that you pulled in a bunch of text from 2818?

[mnot]

@ekr yes; this is going to obsolete 2818. Can you look at 2.5.2, 5.4.2 and 5.4.3?

[ekr]

If we're going to do this, we should also sort out the relationship with 6125. @stpeter