Re: [TLS] assert TLSext in renego-ServerHello instead of disable renego

[Michael D'Errico <[e-mail]>]

>> My point was that if the server *is* upgraded and the client does not
>> send the extension on its initial handshake, it is taking an unnecessary
>> risk.
> 
> The issue isn't whether the client sends it. Of course the client
> sends it. It's whether the client aborts the connection of the server
> doesn't return it.

I'm in agreement with you that the client should send the extension.  But
there have been messages suggesting that a client doesn't need to send it
on its initial connection, only when renegotiating.  I've been trying to
convince them that the client must send it especially in its first handshake
in order to avoid being attacked.

Mike