Re: [TLS] assert TLSext in renego-ServerHello instead of disable

[Martin Rex <[e-mail]>]

Eric Rescorla wrote:
> 
> Bodo Moeller wrote:
> > 
> > Why make a client send it on the initial handshake if that client  
> > wouldn't have plans to abort the connection if the server doesn't  
> > acknowledge it?  Interoperability seems easier if you don't send it.
> 
> Agreed. I've rethought this point since I wrote it.

I see value in extension-less signaling on initial handshake,
because it will immediately provide protection to updated clients
when the server is updated even when both, client and server still
support the insecure renegotiation (i.e. very early in the
transition period) or the client still allowys a reconnect
fallback with an extension-less ClientHello.

-Martin