Re: [TLS] draft-rescorla-tls-renegotiate.txt

[Nicolas Williams <Nicolas.Williams at sun.com>]

On Fri, Nov 06, 2009 at 08:59:49PM +0100, Martin Rex wrote:
> Michael D'Errico wrote:
> > 
> > >    - to describe how to add/implement this fix to each and
> > >      every affected protocol version of the SSL/TLS Family.
> > > 
> > >      I just noticed that SSLv3 does _NOT_ have a "no_renegotiate" alert!
> > >      To me, it looks like the SSLv3 spec does not specify how to
> > >      deny performing a renegotiate.  Which is slightly odd, since
> > >      there are SSLv3 implementations that do not implement renegotiation...
> > 
> > Even more importantly, SSLv3 does not support extensions.
> 
> You're correct.  SSLv3 allows extensions in the ClientHello that
> are to be ignored, but it does not support them in ServerHello.
> 
> Oooops.
> 
> Suggestions?

Stop using SSLv3.  Its end has arrived.