Re: [TLS] drop obsolete SSL 2 backwards compatibility from TLS 1.3 draft

[Brian Smith <[e-mail]>]

Dave Garrett <[e-mail]> wrote:
> On Saturday, December 27, 2014 06:37:08 pm Brian Smith wrote:
>> if the server is allowed to support TLS 1.0, then it should seems
>> reasonable for it to negotiate TLS 1.0 with a client that sent an
>> SSL2-compatible TLS 1.0 ClientHello.
>
> The fact
> that some clients are EOL and might not do connect in a way that will work
> forever is not something worth worrying about. I don't think it's unreasonable
> to expect that 20 years later the "new" hello format should be mandatory.

> SSL2 messages should not be tolerated at this point if we want TLS 1.3 to be
> considered a specification for a modern security protocol implementation.

Like I said in my previous message, I do think that for TLS 1.3,
SSL2-compatible ClientHellos must not be used since they don't allow
extensions. Further, it is better for the TLS 1.3 spec to remove all
the text describing the SSL2-compatible hello stuff, regardless of
whether or not supporting SSL2-compatible-ClientHello for TLS
1.0/1.1/1.2 is explicitly prohibited or not.

Cheers,
Brian