Re: [TLS] simplistic renego protection

[Nelson B Bolyard <nelson at bolyard.me>]

On 2009-11-19 20:24 PST, Michael D'Errico wrote:
> Nelson B Bolyard wrote:
>> ... what is a "lenient server"?
>> Is it a vulnerable server?
> 
> Yes.
> 
> Some servers apparently cannot function without renegotiation.
> They will need to continue providing service to unpatched
> clients for some amount of time and thus remain vulnerable.
> 
> The solution we publish must make it impossible for a lenient-
> but-patched client and a lenient-but-patched server to be
> successfully attacked by a MitM using the renegotiation bug.

Based on your respective most recent messages in this thread,
I think you and Martin have different definitions of "lenient server".
Please establish a common set of definitions.