Re: [TLS] Comments on TLS identity protection

Hi Eric,

> Yes, but I don't think this really explains why the certificate
> needs to be kept secret or why the double handshake technique isn't
> good enough.

IMHO, WiMAX and Wireless Networks operators that use TLS based-certificate
have interests in providing alike GSM and UMTS modele for identity hiding.

I CCed Joe Salowey who could have more arguments regarding the certificate
hiding in WLAN and WiMAX using TLS.

> The attacker performs a MITM attack with a valid certificate.
> The TLS implementation completes the handshake and then prompts
> the application to verify the certificate's identity against
> the intended identity. This fails, but by this time the client
> has already provided his certificate.

Thank you. It is clear for me now. However, sentences will be added to the
Security Considerations, in order for the client to check its
understanding of the server hostname against the server's identity as
presented in the server Certificate message.

Best regards,
Badra

_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls