 |
 |
 |
 |
|
 |
|
 |
|
 |
|
 |
|
|
|
|
|
|
|
|
|
|
|
|
It might be easier to _NOT_ key on the finished message, but on the master secret instead.Too late for that.
Not just too late, but also a bad idea. Previous discussions relating to FAST and anonymous PKINIT resulted in some investigation which, in turn, led to the somewhat surprising result that the TLS master secret does _not_ name a unique channel, while the finished messages _do_.
-- Jeff