[TLS] draft-mavrogiannopoulos-new-tls-padding-00

[[e-mail] (Martin Rex)]

Nikos Mavrogiannopoulos wrote:
> 
> http://tools.ietf.org/html/draft-mavrogiannopoulos-new-tls-padding-00
 
If you leave the fixing (and changing) of the Cipher PDUs alone,
you could alternatively pursue a "random padding" by simply defining
an (anti-)compression algorithm to that effect, with whatever semantics you
desire.  This might also fit smoother with implementations.

The hard limit that your fancy (anti-)compression algorithm will
have to observe from the TLS specs,
  e.g. http://tools.ietf.org/html/rfc5246#section-6.2.2

is that the output of your (anti-)compression must not exceed 2^14+1024
bytes.

The "may not increase the content length by more than 1024 bytes" rule
is more of a soft rule that can be adjusted by the (anti-)compression
algorithm spec as long as the "the output must not exceed 2^14+1024"
hard rule is obeyed.

-Martin