Re: [TLS] Redefine Finished message for TLS 1.3 ?

[Nicolas Williams <[e-mail]>]

On Sat, Nov 14, 2009 at 02:48:50PM -0800, Nelson B Bolyard wrote:
> On 2009-11-14 13:33 PDT, Nicolas Williams wrote:
> > On Sat, Nov 14, 2009 at 11:13:23AM -0800, Nelson B Bolyard wrote:
> >> Does the Working Group share interest in redefining the Finished message
> >> computation for TLS 1.3?
> > 
> > I doubt it.  Once the use of hello extensions is demonstrated to work
> > even for critical cases and when server hello extensions are needed,
> > then there's no need to change to using an unsignalled fix as in your/my
> > proposals.
> 
> Well, I'd consider use of the version number 0x0304 (for SSL 3.4, which
> is TLS 1.3) in the client hello to be an effective signal.

Well, yes, but that wasn't your proposal on Sept 29, and it wasn't mine
this past week.

> I hope there will be more responses, so that we can get a sense of consensus
> for or against this idea.

I think the consensus is probably to go with EKR's fix as is.  Note that
my proposed fix could actually also be deployed for SSLv3 systems, IF it
makes sense that they could get patched more easily than upgraded (which
I doubt, but then, I've no data to go on).

Once EKR's fix is deployed there will be no point to do a TLS 1.3 just
to have an alternative fix -- why bother?

Nico
--