![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
Nasko Oskov wrote: > I support the TLS extension approach for TLS1.0 and above with the > modification that we add the magic cipher suite in the client hello. > This will allow a TLS ClientHello with the extension to be used > against SSLv3 only server (assuming server properly ignores extensions). The RI approach can be used with an extension-tolerant SSLv3-only server even without the "magic ciphersuite". -- David-Sarah Hopwood ⚥ http://davidsarah.livejournal.com
Attachment:
signature.asc
Description: OpenPGP digital signature