Re: [TLS] SCSVs and SSLv3 fallback

[[e-mail] (Martin Rex)]

Yngve N. Pettersen wrote:
> 
> That is BTW, the principle embedded in my version rollback removal draft  
> <http://datatracker.ietf.org/doc/draft-pettersen-tls-version-rollback-removal/>,  
> which uses the server's support of the Renego extension as a proxy  
> indication to determine full version and extension tolerance, and then use  
> that information to assume that any failure to negotiate a connection,  
> when signaling the client's highest supported version with full extension  
> support in the handshake, means that the connection is being subjected to  
> a version rollback attack, and terminate the connection attempt rather  
> than roll back to an older version.

But you do realize that this idea has been killed by Microsoft shipping
its goofed RSA premaster secret version (check) in Windows7 SChannel --
and Win7 SChannel with rfc5746 support has been in such a state of misery
for almost 3 years now.

-Martin