Re: [TLS] Issue 56: AES as MTI

[Russ Housley <housley at vigilsec.com>]

This has always been the case.  It ensures that there is a 
ciphersuite that can be negotiated between all implementations 
(unless it is explicitly turned off by policy controls).

Russ


At 05:43 PM 9/14/2007, Eric Rescorla wrote:
> At Fri, 14 Sep 2007 14:10:58 -0700,
> Nelson B Bolyard wrote:
> >
> > Chris Newman wrote:
> > > As far as I can tell, the real-world MTI for SSL/TLS as deployed is
> > > RC4.  I dislike it when the real world MTI and the specified MTI differ
> > > and the specification fails to explain the difference.
> >
> > I think the RFC does not need a Mandatory Cipher Suite.
>
> I don't believe that that's on the table. As I understand IESG
> policy, it's that there must be a Mandatory To Implement cipher
> suite. Tim? Sam?
>
> -Ekr
>
>
> _______________________________________________
> TLS mailing list
> TLS at lists.ietf.org
> https://www1.ietf.org/mailman/listinfo/tls


_______________________________________________
TLS mailing list
TLS at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls