Re: [TLS] Proposal for hybrid solution using most of the ideas

[Stefan Santesson <stefan at aaa-sec.com>]

I think the important point of this thread is that there are strong
arguments for providing a solution for SSLv3, not using extensions.

What I don't understand is the rationale for providing two solutions, when
one solution could work for all cases.


Finally, I don't like the certificate signaling solutions for reasons
mentioned. It may also disturb the efficiency of information caching
according to the cached info draft (even though that might be a minor
concern).

/Stefan


On 09-11-19 6:29 AM, "Steve Dispensa" <dispensa at phonefactor.com> wrote:

> 
> Now with all that said, I still think the right solution is to use the
> extension in TLS, since it's architecturally pretty clean; lots of related
> arguments have been made by others along these lines already. I just think
> that it's not going to work for SSLv3, and something must be done for SSLv3,
> or it must be turned off completely in clients.