Re: [TLS] Proposed text for removing renegotiation

[Nikos Mavrogiannopoulos <[e-mail]>]

On Fri, 2014-06-20 at 09:50 -0700, Martin Thomson wrote:
> On 20 June 2014 00:32, Nikos Mavrogiannopoulos <[e-mail]> wrote:
> > Could you elaborate on the applications that will be affected by such
> > change? I've never seen any such applications, and in fact for the 99%
> > of the renegotiation uses (e.g., the web) the renegotiation operation
> > would be identical before and after my proposed change.
> I'm concerned about applications that rely on renegotiation for
> rekeying purposes, not the web scenarios.  For instance, those small
> number of F5 users that have set a renegotiation timer (see David's
> email earlier in the thread).

How would these applications be affected? Do you know whether the F5
implementation interleaves the re-handshake with application data? In
any case I don't see how can this be used as an argument for removing
renegotiation instead of what I proposed. In both cases (if we assume
that the F5 implementation does interleave application with handshake
data), the implementation would need to be updated.

regards,
Nikos