Re: [TLS] Working Group Last Call for draft-ietf-tls-downgrade-scsv-00

[Bodo Moeller <[e-mail]>]

>> Also note that in the *specific* hypothetical scenario that you
describe, the server actually would accept the fallback retry: you said
that TLS 1.0 is the highest protocol version supported by the server; this
is not higher than ClientHello.client_version in the TLS 1.1 retry, so the
server wouldn't reject.)

> No, this is not what I was saying.

Yes, it is ("Let's assume that the server supports all protocols
SSL3.0-TLS1.0").  I gather that's not what you meant, though.

> In my scenario the server supports TLS1.2 in general with some
ciphersuites (and will support TLS1.3 in the future). The server is
configured in a way that the ciphersuite that it can negotiate with the
client requires SSLv3.
>
> What does draft-ietf-tls-downgrade-scsv-03 want the server to do here:
assume it's highest version is TLS1.2 or SSL 3.0?  I.e. is the max. version
a static property on the server or dynamic based on ciphers in ClientHello?

There's no -03 draft, but the current draft's implication should be clear:
the server compares protocol versions only and hence rejects. (Pretending
that the highest protocol version is SSL 3.0 wouldn't make sense.)