Re: [TLS] drop obsolete SSL 2 backwards compatibility from TLS 1.3 draft

[Dave Garrett <[e-mail]>]

On Tuesday, December 30, 2014 03:20:34 am Brian Smith wrote:
> I think there is pretty strong agreement that:
> 
> * The client MUST NOT use an SSLv2-compatible ClientHello. (RFC 6176
> already says this.)
> 
> * The server MUST reject an SSLv2-compatible ClientHello when its
> version field is higher than TLS 1.2. (Somebody else said that this is
> already the case because some extensions are mandatory for the client
> to send, and extensions aren't allowed in the SSLv2-compatible
> ClientHello.)
> 
> * All the other text regarding SSLv2 should be removed from the TLS 1.3
> spec.
> 
> The only disagreement is whether the TLS 1.3 spec should say that the
> server MUST reject any SSLv2-compatible ClientHello, regardless of
> what TLS version is being offered by the client.
> 
> So, why not break up your changeset into two parts in two separate
> issues?: One that does the three things that there is agreement on,
> and a new changeset for a new issue about whether all SSLv2-compatible
> ClientHellos must be rejected. Then at least we don't hold up the
> significant progress of those three changes while we resolve whether
> to make the last change.


Agreed. Will do.


Dave