Re: [TLS] TLSrenego - current summary of semantics and possibilities

[Yair Elharrar <[e-mail]>]

Steve Dispensa wrote:
>>
>>     Lacking application level re-connect provisions for forward-incompatible
>>     SSL/TLS servers, a TLS client might not want to sent the TLS extension
>>     in the initial ClientHello of a connection.
>
> This was discussed a bit at the Sept. 29 meeting. I had originally suggested
> that the extension need not be present during initial negotiations at all,
> but it was pointed out that network management systems might want to
> inventory patched clients and servers.

This could backfire. It would allow hackers to detect unpatched clients, and focus their attacks on them.


Yair
--

This email and any files transmitted with it are confidential material. They are intended solely for the use of the designated individual or entity to whom they are addressed. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, use, distribution or copying of this communication is strictly prohibited and may be unlawful.

If you have received this email in error please immediately notify the sender and delete or destroy any copy of this message