Re: [TLS] Proposed text for removing renegotiation

[Steve Checkoway <[e-mail]>]

On Fri, Jun 13, 2014 at 7:34 AM, Watson Ladd <[e-mail]> wrote:


> The issue is the following: most applications do something like this
> parse_request(conn)
> check_if_request_authorized(conn)
>
> This assumes that the authentication state doesn't change in between
> the two lines, or midway through the parse.
> With renegotiation it can.


Although I'm leaning toward removing renegotiation (and potentially adding
rekeying or authentication), I'm not sure your example demonstrates an
issue. Regardless of the authentication state during parse_request, the
relevant issue is is the other side authorized at the point of the
check_if_request_authorized.

Where do you see a TOCTTOU violation?

 --
Steve Checkoway