Re: [TLS] Implementation survey: Client Certificate URL extension

[Florian Weimer <fweimer at bfk.de>]

* Eric Rescorla:

> Too late for that. Plus, it's not like this is the only place this
> kind of thing is standardized. Cf. web pages.

The more relevant example seems to be DTD fetching for XML documents
(which can be triggered by automated document submission to a web
server).  It turns out that it's difficult to switch that off in many
processing environments.

-- 
Florian Weimer                <fweimer at bfk.de>
BFK edv-consulting GmbH       http://www.bfk.de/
Kriegsstraße 100              tel: +49-721-96201-1
D-76133 Karlsruhe             fax: +49-721-96201-99
_______________________________________________
TLS mailing list
TLS at ietf.org
https://www.ietf.org/mailman/listinfo/tls