Re: [TLS] Proposal for hybrid solution using most of the ideas

[Nasko Oskov <noskov at microsoft.com>]

Michael D'Errico wrote:
>
>So you want to have two solutions, one for TLS 1.0+ and another for SSLv3?  
>I'm not sure why we need two when any solution that works for SSL will also work for TLS.

I do not believe the solutions that mess up with the actual protocol are
something that should be encouraged in the TLS protocol. Hence I propose at
least the running hash behavior is the same, but signaling is different. TLS
has extensions and they are perfectly designed for this purpose. I don't see
a reason not to use them. Servers that cannot handle properly extensions will 
fall back to using SSLv3.

>Also the Certificate message is optional, so it would cause trouble for some cipher suites.

Fair point.

>And even more importantly, there is only ServerHello sent when you resume an old session!

Session resumption is already secure since it uses existing crypto state as
part of the negotiation. There are no problems in that case.

Nasko