Re: TLS requirements (Last Call: draft-ietf-atompub-protocol to Proposed Standard)

[Sam Hartman <hartmans-ietf at mit.edu>]

>>>>> "Robert" == Robert Sayre <rsayre at mozilla.com> writes:

    Robert> Sam Hartman wrote:
    >> My preference is to resolve this by making 2818 normative; I
    >> believe we've already 3967'd 2818 so we don't need an
    >> additional last call on this one.
    >> 

    Robert> Is RFC 2818 sufficient to ensure interoperability?  It
    Robert> would be quite easy for two implementations to claim to
    Robert> implement "TLS" and fail to interoperate. RFC 4346
    Robert> contains mandatory cipher suites. Without those,
    Robert> conformant implementations could fail during
    Robert> authentication setup, right? The same danger would exist

I think both 2818 and 4346 contain important details and need to be
normative.


_______________________________________________
Ietf mailing list
Ietf at ietf.org
https://www1.ietf.org/mailman/listinfo/ietf