Re: [TLS] rfc7366: is encrypt-then-mac implemented?

[Nikos Mavrogiannopoulos <[e-mail]>]

----- Original Message -----
> Yes, SSLv3 is explicitly unsupported. As there is no handshake back-
> ward compatibility with SSLv3 "03 00" is forbidden at the record level.

That's pretty pointless and harms interoperability. With that you are not 
forbidding SSL 3.0, but all implementations which use 3.0 in the record 
version for client hello. That was widely used as a mitigation in the past
for other broken servers that only accepted SSL 3.0 version field.

In any case, the version in TLS record indicates the record format, not the 
negotiated version, which is present in the client hello handshake packet.

The last two paragraphs of http://tools.ietf.org/html/rfc5246#appendix-E.1
make that clear: "Thus, TLS servers compliant with this specification MUST accept
any value {03,XX} as the record layer version number for ClientHello.".

regards,
Nikos