Re: [TLS] Summarizing identity change discussion so far

[<[e-mail]>]

Martin Rex wrote:

> > Although using the callback-style APIs might be more common (and in
> > some sence nicer, since it allows you to abort the handshake
> > a bit earlier -- but an app developer might not care about this very
> > much), I think it would be a surprise to most app developers that
> > using the get-style APIs might not be secure.
> >
> > (And I wouldn't be surprised at all if real applications using
> > those get() style APIs are found...)
> 
> The get-style API is _the_only_ API that I provide to our applications.
> Besides, I'm coming from the GSS-API world, and there never was
> a callback API.
> 
> If you think that get-style API is dangerous, then you seem to be
> quite unaware about the risks involved with some of the callback APIs
> (besides being difficult to use in distributed architectures).

I did not intend to imply that callback-style APIs are somehow 
better; clearly both can have cases where what the app developer
expects the library to do could be quite different from what
TLS actually does...

Best regards,
Pasi
(not wearing any hats)