Re: [TLS] security levels for TLS

At Fri, 12 Oct 2007 22:37:30 +0300,
Nikos Mavrogiannopoulos wrote:
> 
> On Friday 12 October 2007, Paul Hoffman wrote:
> > At 12:04 PM -0700 10/12/07, Mike wrote:
> > >Apparently no argument will suffice, and you would rather keep the
> > >status quo than be proactive.  How long do you think it would take
> > >to add this extension to a TLS toolkit?  In my own code, I could
> > >probably do it in less than a day, with time left over to get in a
> > >round of 18 holes.
> >
> > No doubt. Of what positive and negative value would such code be?
> > Confusing and/or giving users false senses of security are definitely
> > negative.
> 
> Actually I think the latter sentence describes the current situation!

How so? Nothing at all stops you from putting any indicator you
like in your code. Why does IETF have to standardize it?

-Ekr

_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls