Re: [TLS] TLSrenego - possibilities, suggestion for SSLv3

["Joseph Salowey (jsalowey)" <[e-mail]>]

 

> -----Original Message-----
> From: [e-mail] [mailto:[e-mail]] On 
> Behalf Of Marsh Ray
> Sent: Sunday, November 15, 2009 10:36 AM
> To: Bodo Moeller; [e-mail]
> Subject: Re: [TLS] TLSrenego - possibilities, suggestion for SSLv3
> 
> Bodo Moeller wrote:
> >
> > The "Client hello" section in RFC2246 (i.e., for TLS 1.0) 
> includes a 
> > "Forward compatibility note": "In the interests of forward 
> > compatibility, it is permitted for a client hello message 
> to include 
> > extra data after the compression methods."  This is the 
> provision that 
> > allows clients to try using extensions without having to 
> know whether 
> > a specific server has extension support.
> > 
> > I can't spot something like that in 
> draft-freier-ssl-version3-01.txt. 
> > What wording in what specification are you referring to?
> 
> This language only seems to be in the definition of the 
> Client Hello, not the v3 Server Hello.
> 
[Joe] The server is not allowed to send an extension if the client does
not send it.  I don't see a spec problem here.  


> - Marsh
> 
> > Transport Layer Security Working Group                  
> Alan O. Freier
> > INTERNET-DRAFT                                 Netscape 
> Communications
> > Expire in six months                                    
> Philip Karlton
> >                                                Netscape 
> Communications
> >                                                         
> Paul C. Kocher
> >                                                 Independent 
> Consultant
> >                                                      
> November 18, 1996
> > 
> >                           The SSL Protocol
> >                             Version 3.0
> > 
> > 
> >                   <draft-freier-ssl-version3-02.txt>
> [...]
> >    Forward compatibility note:
> >                   In the interests of forward compatibility, it is
> >                   permitted for a client hello message to include
> >                   extra data after the compression methods. 
>  This data
> >                   must be included in the handshake hashes, but must
> >                   otherwise be ignored.
> 
> _______________________________________________
> TLS mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/tls
>