Re: [TLS] TLS renegotiation issue

[Nicolas Williams <Nicolas.Williams at sun.com>]

On Thu, Nov 05, 2009 at 04:28:57PM -0600, Marsh Ray wrote:
> Nicolas Williams wrote:
> > I don't think it was ever really true that "the IETF doesn't do APIs".
> 
> I would add here that if the IETF had compared the way TLS looks on the
> wire with how it is presented by SSL APIs in practice, this defect could
> not have gone unnoticed.

Indeed.  Larry Zhu described to me how the SSPI models TLS just a few
days ago.  I should have noticed immediately the lack of binding, but
because I wasn't also thinking of HTTPS, I didn't.

I'd go far enough to say that we must consider at least abstract APIs to
protocols such as TLS.

Nico
--