Re: [TLS] TLS 1.2 hash agility

[Eric Rescorla <ekr at networkresonance.com>]

At Wed, 26 Sep 2007 10:07:52 -0700,
Mike wrote:
> 
> >> At the risk of being redundant, I assert that making this extension
> >> symmetric and allowing the server to respond with its own list of
> >> supported algorithms, is better than having the server send its
> >> list every place where it is needed (now and in the future).  Send
> >> it once in ServerHello, and use it where it's needed.
> > 
> > There is only one place where it's needed: CertificateRequest.
> 
> That is true at the moment, but if a future addition to the protocol
> also requires a signature, you will need to send the list twice.

Or simply make the change then.


> While I agree that this is in general good design, my opinion is
> that the other factors outweigh it.  Gentlemen can disagree.

Yes.

-Ekr


_______________________________________________
TLS mailing list
TLS at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls