Re: [TLS] Verifying X.509 Certificate Chains out of order

["Steven M. Bellovin" <smb at cs.columbia.edu>]

On Mon, 06 Oct 2008 07:41:52 -0700
Eric Rescorla <ekr at networkresonance.com> wrote:

> I think there are two separate issues here:
> 
> (1) Whether implementations should be required to send certificates
>     in a specific order.
> (2) Whether implementations should generate an error if they are
>     received in another order.
> 
"Be conservative in what you send; be liberal in what you accept."


		--Steve Bellovin, http://www.cs.columbia.edu/~smb
_______________________________________________
TLS mailing list
TLS at ietf.org
https://www.ietf.org/mailman/listinfo/tls