Re: [TLS] Re: when is it ok to resume a cached SSL/TLS session

----- Original Message -----
From: "Martin Rex" <martin.rex@sap.com>
To: <home_pw@msn.com>
Cc: <martin.rex@sap.com>; <ekr@networkresonance.com>; 
<tls@ietf.org>
Sent: Monday, January 15, 2007 11:23 AM
Subject: Re: [TLS] Re: when is it ok to resume a cached 
SSL/TLS session

> I think it is clear from the protocol handshake and the 
> state machine
> that there is a significant difference between a server 
> not resuming
> a cached session and an established session doing a 
> renegotiation.
> For the denied resume, there is no agreement on a common 
> previous
> session state, while for a renegitiation request, there 
> exists
> common agreed-upon session state.

Make your recommendation on the text change I proposed, for 
TLS 1.2. You have two choices really, given your (combined) 
arguments: SHOULD or MUST.

If this is important enough, one of those two changes can be 
incorporated. It's a one word change.

_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls