Re: [TLS] RESOLVED (Re: [sasl] lasgt call comments (st Call: draft-altman-tls-channel-bindings (Channel Bindings for TLS) to Proposed Standard))

[Nicolas Williams <Nicolas.Williams at sun.com>]

On Wed, Nov 04, 2009 at 03:28:35PM +0100, Pasi.Eronen at nokia.com wrote:
> Nicolas Williams wrote:
> > I'm not sure that we can make it any clearer.
> 
> In any case, I guess we agree that we're referring to the latest TLS
> handshake sent in clear (with TLS_NULL_WITH_NULL_NULL state)?

Yes (and before any ChangeCipherSpec messages).

> Could we somehow refer to this? Perhaps:
> 
>   Note: We define a new "TLS connection" to start when the client
>   sends an unencrypted (TLS_NULL_WITH_NULL_NULL cipher suite) Client
>   Hello message (which can lead to either a full handshake, or
>   resuming a session). Renegotiation (sending a Client Hello protected
>   under some other cipher suite) does not start a new "TLS connection".  
>   Note that this is separate from any notion of "connection", if any, 
>   in the underlying transport protocol (such as TCP or UDP).

I like that.

> (Is this consistent with what the existing implementations do?)

It's consistent with the description that had been registered.  I don't
have an implementation, so I can't say as to existing implementations.
Jeff and/or Larry should know.

Nico
--