« Return to Thread: cipher suites for protecting client credentials

Re: cipher suites for protecting client credentials

by Mohamad Badra-3 :: Rate this Message:

>>
>> Is incompatible with existing TLS cipher suite behavior. The world is full
>> of servers which will ignore the SCSV. Indeed, this is why it is
>> attractive
>> in other settings
>
>
> I will replace "MUST" with "MAY".

I don't see how this helps. You still need to distinguish new from old.

I don't see how other setting can achieve that. Would you elaborate please?

Best regards

Badra

_______________________________________________
TLS mailing list
TLS@...
https://www.ietf.org/mailman/listinfo/tls

« Return to Thread: cipher suites for protecting client credentials