[TLS] RE: Comments on draft-santesson-tls-ume-04/draft-santesson-tls-supp-00

This is a text outline for what I propose to add at the end of the
message flow section.

"The server MUST expect and gracefully handle the case where the client
chooses to not send any supplementalData handshake message even after
successful negotiation of extensions. The client MAY at its own
discretion decide that the user mapping hint it initially intended to
send no longer is relevant for this session. One such reason could be
that the server certificate fails to meet certain requirements."

It may need some improvements but I don't see any need for an error
alert.
The server will simply proceed as if no hint negotiation was initiated.

Stefan Santesson
Program Manager, Standards Liaison
Windows Security

> -----Original Message-----
> From: Russ Housley [mailto:housley@vigilsec.com]
> Sent: den 18 april 2006 12:50
> To: Eric Rescorla
> Cc: iesg@ietf.org; tls@ietf.org; Stefan Santesson
> Subject: Re: Comments on
draft-santesson-tls-ume-04/draft-santesson-tls-
> supp-00
> 
> Eric:
> 
> > > >S 4:
> > > >You can do the UPN hint extension exchange and then NOT
> > > >send supp_data? That seems wrong.
> > >
> > > I agree, if the negotiation is successful, then the supplemental
data
> > > should be sent.
> >
> >This should be a MUST, IMO. I.e., the peer can and probably
> >should detect it and throw an error. If it's a SHOULD,
> >then the document needs to explain how.
> 
> I have no problem with the requirement that there be a fatal
> alert.  Do we need to specify a new AlertDescription value for this
> situation?
> 
> Russ
> 

_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls