[TLS] RE: WGLC - Stepping up Hash

[<Pasi.Eronen at nokia.com>]

Stefan Santesson wrote:

> Yes and No. No I don't want this assumption to be defined in 
> the protocol. That would be pretty ugly and would have to be 
> defined per cipher suite.
> But Yes, the server may have deterministic knowledge that in 
> the pool of clients it serves (or for the particular service 
> it provides) either all clients, or a subgroup of the clients 
> that uses a particular cipher suite, in fact can handle Hash Z.

So you're assuming the existence of some off-line (outside TLS)
negotiation capability (either between the hosts, or their 
administrators) to exchange information about what the 
implementations actually support?

Given that we have the necessary functionality in TLS itself,
why would you want to do that? (And if you do, would this extend
to other parts of TLS as well -- e.g. allow server to select
a cipher suite that the client didn't offer, if it has this
"deterministic knowledge"?)

Best regards,
Pasi


_______________________________________________
TLS mailing list
TLS at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls