Re: [TLS] Opera 10.50 alpha snapshot with TLS Renego extension support

[Wan-Teh Chang <[e-mail]>]

On Sat, Jan 23, 2010 at 7:08 AM, Yngve N. Pettersen (Developer Opera
Software ASA) <[e-mail]> wrote:
> Hello all,
>
> Today Opera Software released a snapshot of Opera 10.50 alpha with support
> for the TLS RenegotiationInfo extension.
>
> Server vendors should note the following:
>
>    * The RI extension is sent in all handshakes using extensions
>    * The SCSV is only sent when we do not know if the server supports
> extensions (implied: Patched servers always support the RI extension)

Could you clarify one issue -- when you send SCSV, do you also
send an empty RI extension?  Your second bullet point implies
that when you send SCSV, you don't send any extension.  But
that contradicts your first bullet point, that you send the RI
extension in *all* handshakes.

>    * Against known patched servers Opera 10.50 will ONLY send Client Hellos
> identifying TLS 1.2 as the highest supported version, and will abort ongoing
> handshakes if it not already identifying with TLS 1.2. It will **NOT** fall
> back to an older version if negotiation fails. Patched servers are assumed
> to be version tolerant.

I don't understand what you meant by "will abort ongoing handshakes
if it not already identifying with TLS 1.2".

>    * It is a fatal error for a server (identified by hostname and port) to
> first indicate support for RI, then later (in the same session) fail to
> indicate support.

In the same browsing session or in the same SSL session?

Thanks for the statistics on various TLS server implementation
errors.

Wan-Teh