Re: [TLS] Need for S->C signaling

[Martin Rex <mrex at sap.com>]

Dr Stephen Henson wrote:
> 
> Just had a crazy idea for S->C signaling:
> 
> ServerHello contains the MAGIC value in the CipherSuite indicator:
> we know this can never happen by accident. The real ciphersuite
> indicator is placed elsewhere, e.g. part of session ID.
> Session ID definition slightly modified to permit 34 bytes
> instead of 32.

Signaling through ciphersuite ID in ServerHello should work.
Middle Boxes may still be confused.

But I would definitely _NOT_ touch the session ID, in particular
not make it longer.

Since the signaling through ciphersuite ID is non-ambiguous,
we could just re-purpose a part of Server.Random.

-Martin