Re: [TLS] FFDHE and SHOULDs on usage

[[e-mail] (Martin Rex)]

Daniel Kahn Gillmor wrote:
>>
>> Groups are ordered based on client preference, noting the additional
>> ordering considerations in Section 6.1.
> 
> Also, this rewrite says "ordered based on client preferences" but
> doesn't indicate which order based on client preferences: most preferred
> to least preferred or the other way around.  It may be pedantic, but
> this is exactly the sort of pedantry that RFCs should include.


Could we just scrap the "based on xxx preference" nonsense entirely?

The sender of the list sends whatever it sees fit, and the receiver
of the list has the privilege to pick what ever the receiver believes
is most appropriate from the receivers point of view.

I never understood why (a) such a silly suggestion was made for
the ordering of cipher suites in ClientHello and (b) why any TLS server
implementaion would care for the client's ordering rather than enforcing
the server preference.  If the client does not want something, it must
not offer it.  If the server does not want something, it must not pick it.

-Martin