Re: [TLS] draft-rescorla-tls-renegotiate.txt

[Martin Rex <mrex at sap.com>]

Michael D'Errico wrote:
> 
> >    - to describe how to add/implement this fix to each and
> >      every affected protocol version of the SSL/TLS Family.
> > 
> >      I just noticed that SSLv3 does _NOT_ have a "no_renegotiate" alert!
> >      To me, it looks like the SSLv3 spec does not specify how to
> >      deny performing a renegotiate.  Which is slightly odd, since
> >      there are SSLv3 implementations that do not implement renegotiation...
> 
> Even more importantly, SSLv3 does not support extensions.

You're correct.  SSLv3 allows extensions in the ClientHello that
are to be ignored, but it does not support them in ServerHello.

Oooops.

Suggestions?


-Martin