Re: [TLS] Consensus Call for draft-ietf-tls-renegotiation-00.txt

[Martin Rex <mrex at sap.com>]

Martin Rex wrote:
> 
> Joseph Salowey wrote:
> > 
> > draft-ietf-tls-renegotiation-00
>  
> I support an entirely different proposal, described here:
> 
> http://www.ietf.org/mail-archive/web/tls/current/msg04572.html
> 
> and over the weekend I will incorporate this into the I-D that
> I'm working.   I will try hard to ship the I-D on Monday 23-Nov-09.

While trying to document the new idea I realized that embedding
the previous finished messages into real handshake messages
leads to a fail UNsafe design just like TLS extenion RI.

So I will stick to what I've been working on through the week
and what Mike has already implemented (manually add verify_data
to the handshake message hash without sending it over the network,
C->S signaling by magic ciphersuite and S->C signaling with
higest bit of ServerHello.server_version.major.

I-D on monday.

-Martin