Re: [TLS] TLS renegotiation issue

[Cullen Jennings <fluffy at cisco.com>]

On Nov 5, 2009, at 2:56 PM, Martin Rex wrote:

> While I was actively participating IETF meeting (1995-1998) it was
> pointed out several times in IETF plenaries by IESG members that
> the IETF does not do APIs and GSS-API was an exception.


As a current member of the IESG, I think I can say that has changed at  
least a little bit. There are place where the IETF standardizing and  
API, or abstract level of an API, makes sense - and places where it  
does not. I imagine the choice to do an API or not would be handled on  
a case by case basis. I don't have any simple hard and fast advice to  
offer other than talk to the Sec ADs.