Re: [TLS] draft-rescorla-tls-renegotiate.txt

[Robert Relyea <rrelyea at redhat.com>]

On 11/06/2009 11:59 AM, Martin Rex wrote:
> Michael D'Errico wrote:
>   
>>     
>>>    - to describe how to add/implement this fix to each and
>>>      every affected protocol version of the SSL/TLS Family.
>>>
>>>      I just noticed that SSLv3 does _NOT_ have a "no_renegotiate" alert!
>>>      To me, it looks like the SSLv3 spec does not specify how to
>>>      deny performing a renegotiate.  Which is slightly odd, since
>>>      there are SSLv3 implementations that do not implement renegotiation...
>>>       
>> Even more importantly, SSLv3 does not support extensions.
>>     
> You're correct.  SSLv3 allows extensions in the ClientHello that
> are to be ignored, but it does not support them in ServerHello.
>   
In practice, there are too many servers that blow up even on extensions
in clientHellos. So many that NSS only uses extensions in TLS, not in SSL3.

There are some servers that claim to be TLS, that also fail to accept
extensions. To date we have treated those as TLS intolerant SSL 3.0
servers, since it's clearly incorrect behavior for a TLS server to just
barf on an extension.
> Oooops.
>
> Suggestions?
>   
For us, this means SSL3 would be dead in the case you require the extension.

bob
>
> -Martin
> _______________________________________________
> TLS mailing list
> TLS at ietf.org
> https://www.ietf.org/mailman/listinfo/tls
>

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature