Re: [TLS] One approach to rollback protection

[Martin Rex <[e-mail]>]

Eric Rescorla wrote:
> 
> P.S. Yes, I know this is a big stinking hack.

We've been seeing a significant delay in adoption of TLSv1.1.
So while it might smell like a dirty hack to some, I think it is a
reasonable approach to ease the transition pain for the installed base.

As it turned out, the TLS cipher suites were the only protocol extensibility
that had been really interop tested from the beginning, probably because the
list of cipher suites was already quite long when Netscape brought
SSLv3 to the IETF for standardization and most new implementors
started interop testing with much fewer cipher suites in their
initial implementations.

If you look at slowly IPv6 adoption is progressing, it looks like they
do not have enough "dirty hacks" in place yet.  :-]

-Martin