Re: [TLS] Redefine Finished message for TLS 1.3 ?

[David-Sarah Hopwood <[e-mail]>]

Nelson B Bolyard wrote:
> On 2009-11-14 13:33 PDT, Nicolas Williams wrote:
>> On Sat, Nov 14, 2009 at 11:13:23AM -0800, Nelson B Bolyard wrote:
> 
>>> Does the Working Group share interest in redefining the Finished message
>>> computation for TLS 1.3?
>>
>> I doubt it.  Once the use of hello extensions is demonstrated to work
>> even for critical cases and when server hello extensions are needed,
>> then there's no need to change to using an unsignalled fix as in your/my
>> proposals.
> 
> Well, I'd consider use of the version number 0x0304 (for SSL 3.4, which
> is TLS 1.3) in the client hello to be an effective signal.

If you mean that TLS 1.3 would add the verify_data to renegotiating
handshakes implicitly, but previous versions would rely on the extension:
I think that would just create additional code paths, greater complexity,
and more opportunities for implementors to screw up in ways that introduce
forward compatibility problems.

-- 
David-Sarah Hopwood  ⚥  http://davidsarah.livejournal.com