Re: [TLS] First TLS cached information draft posted

[Stefan Santesson <stefan at aaa-sec.com>]

Sorry, but I just have to disagree with myself.

It's just messy and non-logical to include hashes of multiple objects in one
and the same CachedOject structure.

I propose the following text:

   The client MUST NOT include hashes for multiple objects in the same
   CachedObject structure. If more than one hash is present in the
   CachedObject structure, they MUST be hashes over the same information
   object using different hash algorithms.

/Stefan


On 09-06-16 5:09 PM, "Stefan Santesson" <stefan at aaa-sec.com> wrote:

> This CachedObject stucture may contain any number of hashes. This might be
> hashes using different algorithms over the same object or it may be hashes
> of the same kind over different objects (e.g. multiple acceptble certs). It
> is just an unordered list of hashes.