Re: [TLS] TLS renegotiation issue

["Blumenthal, Uri - 0662 - MITLL" <uri at ll.mit.edu>]

There's an example of using such abstract API in SNMPv3. Where it was also
debated ("IETF doesn't do API" :-), but the common sense prevailed.


On 11/5/09  17:31 , "Nicolas Williams" <Nicolas.Williams at sun.com> wrote:

> On Thu, Nov 05, 2009 at 04:28:57PM -0600, Marsh Ray wrote:
>> Nicolas Williams wrote:
>>> I don't think it was ever really true that "the IETF doesn't do APIs".
>> 
>> I would add here that if the IETF had compared the way TLS looks on the
>> wire with how it is presented by SSL APIs in practice, this defect could
>> not have gone unnoticed.
> 
> Indeed.  Larry Zhu described to me how the SSPI models TLS just a few
> days ago.  I should have noticed immediately the lack of binding, but
> because I wasn't also thinking of HTTPS, I didn't.
> 
> I'd go far enough to say that we must consider at least abstract APIs to
> protocols such as TLS.
> 
> Nico

-- 
Regards,
Uri         uri at ll.mit.edu
<Disclaimer>