Re: [TLS] Proposal for hybrid solution using most of the ideas

[Dr Stephen Henson <lists at drh-consultancy.demon.co.uk>]

Martin Rex wrote:
> 
> 
>> Yes, we might be missing something else. The reason I picked the Certificate
>> message is that it is dynamic size by default, so we don't have to alter
>> existing data, just append.
> 
> To me that feels very wrong to use the Certificate message.
> I'm convinced that it should go into the ServerHello.  I'm not
> questioning that ServerHello is the correct place for all of the
> cryptographic parameters _and_ the TLS extensions.
> 

Well in terms of implementation and overhead I'd prefer that the client knows as
soon as possible which method to use. The need to maintain two hash contexts (or
cache some potentially long handshake messages) and always throwing one away is
IMHO not trivial.

Steve.
-- 
Dr Stephen N. Henson.
Core developer of the   OpenSSL project: http://www.openssl.org/
Freelance consultant see: http://www.drh-consultancy.co.uk/
Email: shenson at drh-consultancy.co.uk, PGP key: via homepage.