RE: [TLS] TLS state machine

[<Pasi.Eronen at nokia.com>]

Stefan Santesson wrote:
> 
> Considering this being the TLS state machine, the TLS 
> extension mechanism clearly allows a change of the TLS state 
> machine as it allows other handshake messages to be inserted 
> in this flow.
> 
> What are the criteria that distinguish a valid change to the 
> TLS state machine from an invalid (unsuitable) one?
> Or is this totally subjective?

I wouldn't use words "valid" or "invalid" here; rather, there 
are changes that I'd consider "nicer" (fits better with existing 
pieces of TLS, easier to understand, simpler, etc.) than others.

When there are multiple alternatives to choose from, all of
which essentially work, I'd consider this "niceness" to be
one important criteria for choosing between them. To some 
degree, it is subjective; but it can also be something people
can agree on (and rough WG consensus can be reached).

Best regards,
Pasi

_______________________________________________
TLS mailing list
TLS at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls