Re: [CHANNEL-BINDING] [TLS] [sasl] Updates to

[Martin Rex <[e-mail]>]

Larry Zhu wrote:
> 
> It is amusing that if you actually suggest that it is more complex
> to leave the behavior as undefined.

The part that is a little funny (or weird) is something else.

When we realized that the original TLS renegotiation resulted,
in fact, in a completely different and unrelated channel than
its predecessor, and that all apps that blindly assumed it
would be still the same channel, we decided to fix TLS and
provide that assurance to the app.

_After_ fixing TLS renegotiation, it sounds strange to
define TLS channel bindings that clearly indicate that the
channel before TLS renegotiation and after TLS renegotiation
is _NOT_ the same channel (because it uses different channel
bindings and will make authentications fail that mix them up).

That is IMHO a little weird.


-Martin