Re: [TLS] SSL Renegotiation DOS

[Nikos Mavrogiannopoulos <[e-mail]>]

On Tue, Mar 15, 2011 at 12:31 PM, Jorge A. Orchilles
<[e-mail]> wrote:
> Hello all,
> Marsh Ray has invited me to present my research and report on SSL/TLS
> Renegotiation Denial of Service on this mailing list. I have posted this on
> my site and will paste here for your feedback:
> http://orchilles.com/2011/03/ssl-renegotiation-dos.html
> SSL/TLS Renegotiation Denial of Service
> An SSL/TLS handshake requires at least 10 times more processing power on the
> server than on the client. The handshake is only performed at the beginning
> of a secure connection to establish it. When SSL/TLS Renegotiation is
> enabled on the server, a user is allowed to send a renegotiation request
> which initiates a new handshake. Since it takes much less resources for a
> client to perform a handshake, requesting multiple handshakes per second
> could cause a denial of service on the server side SSL/TLS interface.
> Therefore, if a malicious user on one host requests multiple renegotiation
> requests it will exhaust the server’s resources and not allow any other user
> to establish a connection.

Hello,
 I'm curious, what is the effect of that in typical HTTPS servers? Do
servers allow
for renegotiation initiated by the client? (apache with mod_gnutls doesn't)

regards,
Nikos