Re: [hybi] Criteria for evaluating handshake proposals

[Bjoern Hoehrmann <[e-mail]>]

* Alexey Melnikov wrote:
>I hope this is not going to turn into a lengthy debate, but I would like 
>to understand what people care about when comparing different handshake 
>proposals.
>"Should use the minimal number of round trips" is one thing I've heard 
>on the mailing list.
>What are other things people care about?

Generally speaking it's a matter of minimizing disruption of deployed
infrastructure, minimizing resource consumption, and maximizing successs
rates, with some disagreements about the tradeoffs and the extent to
which one or the other should be done. At the moment we have questions
such as "Must the protocol prevent cache poisoning attacks", "Must the
protocol prevent attacks on shared hosting systems" and the constraints
must first be agreed upon before we can apply criteria that help us 
evaluate the many handshake proposals we've seen (which is in part due
to "handshake" and "framing" being not entirely seperable issues; some
framing methods make the handshake largely irrelevant, for instance).
-- 
Björn Höhrmann · mailto:[e-mail] · http://bjoern.hoehrmann.de
Am Badedeich 7 · Telefon: [phone] · http://www.bjoernsworld.de
25899 Dagebüll · PGP Pub. KeyID: 0xA4357E78 · http://www.websitedev.de/