Re: [TLS] TLS Protocol Version

[Peter Gutmann <pgut001 at cs.auckland.ac.nz>]

"Blumenthal, Uri - 0662 - MITLL" <uri at ll.mit.edu> writes:

>After following this discussion for a while, I can say that I too am against
>fooling around with protocol version number (or with re-purposing an existing
>field). A clean extension-based solution is what's needed. And if SSLv3
>can't/won't support it - so be it.

I've kept quiet so far but I have to venture an opinion at this point: having
followed the massive amount of information exchanged so far, I think the
magic-cipher-suite + modified-finished is far, far cleaner than the extension
Russian roulette option.

Peter.