Re: [TLS] TLS Protocol Version

[Peter Gutmann <pgut001 at cs.auckland.ac.nz>]

<Pasi.Eronen at nokia.com> writes:

>BTW, there's another common renegotiation case where a "low-hanging fruit"
>(trivial-to-implement solution known not to cause interop problems with
>broken servers) exists: changing from server-only authentication to mutual
>authentication (with certificate-based cipher suites).

What TLS does with certificates isn't mutual authentication, it's
unidirectional authentication in both directions.  TLS-PSK provides true
mutual authentication.  So perhaps the fix is to encourage people to switch to
TLS-PSK, which as a side-effect would do a great deal to address the phishing
problem as well.

Peter.