Re: [TLS] assert TLSext in renego-ServerHello instead of disable

[Martin Rex <mrex at sap.com>]

Marsh Ray wrote:
> 
> Martin Rex wrote:
> > Allowing
> > server to assert this particular TLS extension in the ServerHello
> > of a _renegotiation_handhshake_ without having received it in the
> > ClientHello
> 
> What's going to check it?

The client will have to check it, of course -- or abort with
a handshake failure.

It is not very nice to drop the entire responsibility on the client
(which could be silently ignoring the server hello extension), I agree.
Such a semantics would change an opt-in for secure renegotiation into
an opt-out.

The underlying scenario, that we are looking at, is that the server
is asking the client whether it takes responsibility for the contents
of the previous session.


-Martin