Re: [TLS] Need for S->C signaling

To: "tls at ietf.org" <tls at ietf.org>
Subject: Re: [TLS] Need for S->C signaling
From: Dr Stephen Henson <lists at drh-consultancy.demon.co.uk>
Date: Fri, 20 Nov 2009 18:48:20 +0000
Delivered-to: tls at core3.amsl.com
In-reply-to: <C72AC445.671C%stefan at aaa-sec.com>
List-archive: <http://www.ietf.org/mail-archive/web/tls>
List-help: <mailto:tls-request@ietf.org?subject=help>
List-id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-post: <mailto:tls@ietf.org>
List-subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
List-unsubscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
References: <C72AC445.671C%stefan at aaa-sec.com>
User-agent: Thunderbird 2.0.0.23 (Windows/20090812)

Just had a crazy idea for S->C signaling:

ServerHello contains the MAGIC value in the CipherSuite indicator: we know this
can never happen by accident. The real ciphersuite indicator is placed
elsewhere, e.g. part of session ID. Session ID definition slightly modified to
permit 34 bytes instead of 32.

Steve.
-- 
Dr Stephen N. Henson.
Core developer of the   OpenSSL project: http://www.openssl.org/
Freelance consultant see: http://www.drh-consultancy.co.uk/
Email: shenson at drh-consultancy.co.uk, PGP key: via homepage.

Follow-Ups:
- Re: [TLS] Need for S->C signaling
  - From: Marsh Ray
- Re: [TLS] Need for S->C signaling
  - From: Martin Rex

References:
- [TLS] Need for S->C signaling
  - From: Stefan Santesson

Prev by Date: Re: [TLS] simplistic renego protection
Next by Date: Re: [TLS] Need for S->C signaling
Previous by thread: Re: [TLS] Need for S->C signaling
Next by thread: Re: [TLS] Need for S->C signaling
Index(es):
- Date
- Thread

Re: [TLS] Need for S->C signaling

Note: Messages sent to this list are the opinions of the senders and do not imply endorsement by the IETF.