IETF Logo Mail Archive

Re: [TLS] OE + TLS support

Mike <mike-list@pobox.com> Wed, 14 February 2007 22:24 UTC

Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1HHSYV-00052H-Ie; Wed, 14 Feb 2007 17:24:51 -0500
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1HHSYT-000526-Rg for tls@lists.ietf.org; Wed, 14 Feb 2007 17:24:49 -0500
Received: from sceptre.pobox.com ([207.106.133.20]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1HHSYS-0005Tr-Kn for tls@lists.ietf.org; Wed, 14 Feb 2007 17:24:49 -0500
Received: from sceptre.pobox.com (localhost.localdomain [127.0.0.1]) by sceptre.pobox.com (Postfix) with ESMTP id F3D6E2EF for <tls@lists.ietf.org>; Wed, 14 Feb 2007 17:25:09 -0500 (EST)
Received: from [192.168.1.8] (wsip-24-234-114-35.lv.lv.cox.net [24.234.114.35]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by sceptre.sasl.smtp.pobox.com (Postfix) with ESMTP id C459627F6C for <tls@lists.ietf.org>; Wed, 14 Feb 2007 17:25:09 -0500 (EST)
Message-ID: <45D38B86.8010101@pobox.com>
Date: Wed, 14 Feb 2007 14:21:58 -0800
From: Mike <mike-list@pobox.com>
User-Agent: Thunderbird 1.5.0.9 (Windows/20061207)
MIME-Version: 1.0
To: tls@lists.ietf.org
Subject: Re: [TLS] OE + TLS support
References: <45D326E3.4020500@pobox.com> from "Mike" at Feb 14, 7 07:12:35 am <200702141644.RAA26139@uw1048.wdf.sap.corp> <B356D8F434D20B40A8CEDAEC305A1F2403C4ED7A@esebe105.NOE.Nokia.com>
In-Reply-To: <B356D8F434D20B40A8CEDAEC305A1F2403C4ED7A@esebe105.NOE.Nokia.com>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
X-Spam-Score: 0.0 (/)
X-Scan-Signature: d17f825e43c9aed4fd65b7edddddec89
X-BeenThere: tls@lists.ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.lists.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@lists.ietf.org?subject=unsubscribe>
List-Archive: <http://www1.ietf.org/pipermail/tls>
List-Post: <mailto:tls@lists.ietf.org>
List-Help: <mailto:tls-request@lists.ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@lists.ietf.org?subject=subscribe>
Errors-To: tls-bounces@lists.ietf.org

>> On what in particular do they choke?
> 
> For me, www.americanexpress.com:443 seems to work using TLS 1.0
> (negotiates TLS 1.0, and seems to ignore the record protocol version).
> However, if I propose TLS 1.1, the server just closes the connection
> immediately.

If you try TLS 1.0 with extensions, it closes the connection also,
so I consider that broken.  If you omit extensions, it works.

Mike

_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls

v2.23.0 | Report a Bug | By Email