Re: [TLS] Consensus Call for draft-ietf-tls-renegotiation-00.txt

[Martin Rex <mrex at sap.com>]

David-Sarah Hopwood wrote:
> 
> Nasko Oskov wrote:
> > I support the TLS extension approach for TLS1.0 and above with the
> > modification that we add the magic cipher suite in the client hello.
> > This will allow a TLS ClientHello with the extension to be used
> > against SSLv3 only server (assuming server properly ignores extensions).
> 
> The RI approach can be used with an extension-tolerant SSLv3-only server
> even without the "magic ciphersuite".

The RI-approach will not completely prevent connectivity with
an SSLv3-only but extension-tolerant server.

It can, however, _not_ provide any protection either.

In order to get secure renegotiation with an SSLv3-only server
using TLS extension RI, that SSLv3-only server will have to add generic
TLS extension support.

And when that SSLv3-only server does not implement renegotiation,
it will still need to add generic TLS extensions support in order
to assure an updated client using TLS extension RI that it means no harm.

-Martin