Re: [TLS] tls 1.3: renegotiation

[Nikos Mavrogiannopoulos <[e-mail]>]

On Mon, 2014-07-28 at 16:20 -0700, Martin Thomson wrote:

> > Renegotiation is a particularly elegant solution to several problems.
> > It requires little extra code beyond what is already used to perform
> > the initial handshake, and adding a (correctly designed) channel
> > binding as input to the renegotiation process will add the security
> > properties that some API and application developers had previously
> > expected renegotiation to provide.
> It might be conceptually elegant, but it's certainly not free.  Even
> within NSS, the number of "if we are renegotiating" branches is pretty
> large.
> 
> And fixing NSS is relatively easy.  It's the externalities
> renegotiation creates that are the larger problem.  Because API and
> application developers don't look for particular properties, the
> problem is with the assumptions, once of which is generally
> immutability of various properties.

Then please fix the provided by NSS API to make these assumptions
explicit to the applications rather than arguing to change the protocol
for everyone. 

regards,
Nikos