Re: [TLS] Rizzo claims implementation attach, should be interesting

[Martin Rex <[e-mail]>]

Yngve N. Pettersen wrote:
> 
> Martin Rex wrote:
> 
> > Marsh Ray wrote:
> > >
> > > I believe there was a mitigation put in place by OpenSSL: sending an
> > > empty (just padding) message before each app data message.
> > >
> > > I read somewhere that this mitigation was off by default in OpenSSL
> > > because it [breaks] some software (an old MSIE IIRC).
> >
> > Why using a EMPTY (just padding) SSL record?  That looks like an
> > obvious untested border case.
> >
> > How about using an initial SSL record with one byte of real data
> > for SSLv3 and TLSv1.0 SSL with CBC cipher suites?
> 
> According to my testing, this breaks about as many websites,  
> unfortunately, approximately 0.15% of tested websites.

What exactly did you do?  did you fragment the client's
finished handshake message as well (which is the first protected
message on a TLS connnection) ?  As previously mentioned, I would
expect this to cause interop problems, whereas I have a slight
hope that fragmenting only application data might work.

-Martin