Re: [TLS] Proposed text for removing renegotiation

[David Holmes <[e-mail]>]

ekr

➢ Do you have any idea why they want this?

The data points we have on “why” are the following:

1. low-bandwidth connections from automated teller machines (ATM) that can last for days or even weeks.
2. sites that start “open” but will require renegotiation w/ client cert when you try to enter a protected area.
3. infrastructure pieces use iQuery over TLS and these renegotiate periodically.

One could also look at the previous stat like this:

99.5% of the load-balancing customers do not use renegotiation.