Re: [TLS] Renego Indication RI patch interaction with TLS major version interop

In case anyone is interested, I've just added a version intolerance
test to the online assessment tool at SSL Labs. For example:

   https://www.ssllabs.com/ssldb/analyze.html?d=ibm.com

Version intolerance results are at the bottom. I test for 0x0304,
0x0399 and 0x0499.

Suggestions welcome.

On Tue, Jun 15, 2010 at 5:30 PM, Marsh Ray <marsh@extendedsubset.com> wrote:
> WTF?
>
> Article from Yngve:
> http://my.opera.com/yngve/blog/2010/06/02/renego-patched-servers-a-long-term-interoperability-time-bomb-brewing
>
> http://www.links.org/?p=943
>
> I haven't finished reading the full article yet, but I thought others
> would be interested:
>> In the past few weeks, as many as 80-90% of the newly patched servers
>> have refused to negotiate with our tester (the TLS Prober) when it
>> claimed to support the hypothetical v4.1 TLS protocol version (or, as
>> I call it, "TLS NG"). This is much higher than the 69% of all servers
>> that generally exhibit the same problem.
>
> - Marsh
>
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls
>

-- 
Ivan Ristic
ModSecurity Handbook [http://www.modsecurityhandbook.com]
SSL Labs [https://www.ssllabs.com/ssldb/]