Re: [TLS] Cached-info substitution

[Brian Smith <[e-mail]>]

Stefan Santesson wrote:
> I like in principle your suggested simplification to omit whole handshake
> messages to indicate substitution. However, this works only if the cached
> parameter is the only parameter of the handshake message. I.e. It works for
> the server Certificate message but not for the certificate_authorities
> parameter of the CertificateRequest message.
>    
That's why I suggested to treat a zero-length 
CertificateRequest.certificate_authorities (encoded "0x00 0x00") as "use 
the cached value" if and only if the server hello says that the server 
supports caching it. Maybe it is also possible to treat a zero-length 
Certificate.certificate_list ("0x00 0x00 0x00") as "use the cached 
value" if and only if the server hello says the server supports caching 
it. I suggested omitting the Certificate message completely only because 
I am not sure if any cipher suites allow zero-length certificate lists 
for another reason.

Regards,
Brian