Re: [TLS] TLSrenego - possibilities, suggestion for SSLv3

[Marsh Ray <[e-mail]>]

Bodo Moeller wrote:
>
> The "Client hello" section in RFC2246 (i.e., for TLS 1.0) includes a
> "Forward compatibility note": "In the interests of forward
> compatibility, it is permitted for a client hello message to include
> extra data after the compression methods."  This is the provision that
> allows clients to try using extensions without having to know whether a
> specific server has extension support.
> 
> I can't spot something like that in draft-freier-ssl-version3-01.txt. 
> What wording in what specification are you referring to?

This language only seems to be in the definition of the Client Hello,
not the v3 Server Hello.

- Marsh

> Transport Layer Security Working Group                  Alan O. Freier
> INTERNET-DRAFT                                 Netscape Communications
> Expire in six months                                    Philip Karlton
>                                                Netscape Communications
>                                                         Paul C. Kocher
>                                                 Independent Consultant
>                                                      November 18, 1996
> 
>                           The SSL Protocol
>                             Version 3.0
> 
> 
>                   <draft-freier-ssl-version3-02.txt>
[...]
>    Forward compatibility note:
>                   In the interests of forward compatibility, it is
>                   permitted for a client hello message to include
>                   extra data after the compression methods.  This data
>                   must be included in the handshake hashes, but must
>                   otherwise be ignored.