Re: [TLS] COMMENT: draft-ietf-tls-renegotiation

[Martin Rex <[e-mail]>]

Russ Housley wrote:
> 
> Comment:
> 
>   As a protocol climbs the IETF standards-track maturity ladder, we
>   sometimes drop features.  I would rather see renegotiation dropped
>   from TLS than see this complexity added to TLS protocol.
 
The message that I'm receiving here is that Russ thinks the
solution that is currently described in draft-ietf-tls-renegotiation-01
is too complex to be a good solution for this problem.

It is up to Russ to distinguish whether he doesn't think the problem
is worth solving at all, or whether it is _just_ the solution
TLS extension RI that he considers too complex to be an
adequate solution to the TLS renegotiation vulnerability.


Personally, I do not like the complexity of TLS extension RI
either, and as previously indicated would prefer a solution of
minimal complexity such as draft-mrex-tls-secure-renegotiation-03

-Martin