Re: [TLS] Verify data in the RI extension?

[<[e-mail]>]

Martin Rex wrote:

> > I think "what would the SSLv3 designers have done" (almost 15 years
> > ago) and "what should we today" are two completely different
> > questions, which may have completely different answers.
> 
> If we were discussing a new feature for TLSv1.2 or TLSv1.3 only, I
> would agree.
> 
> But we're actually going back to code that is 10 years or more and
> want that fixed as well.  So we need to pay a little more attention
> to the perils of poor souls from the dirty old cruft department than
> to the dreams of the nerds from the fancy new features department.

I fully agree that deployment (even with old implementations) needs to
be taken into account -- otherwise we'd be ignoring reality.

But *none* of the proposals made so far would be the solution SSLv3
designers would have picked, had someone pointed out this problem
before implementations had shipped. For starters, they would not have
needed signalling (in either direction), which is one of the main
issues we're facing today...

Best regards,
Pasi
(not wearing any hats)