Re: Welcome to the ietf-apps-tls mailing list
John Gardiner Myers <[email protected]>
| Newsgroups | gmane.ietf.apps-tls |
|---|---|
| Message-ID | <[email protected]> |
On Tue, 6 May 1997, Paul E. Hoffman wrote: > At 7:02 PM -0700 5/6/97, John Gardiner Myers wrote: > >Given that anything implementing STARTTLS is "new", why support SSL2.0 > >at all? > > There are toolkits for it that some people like. Do any of these toolkits allow SSL to be started up on an already-existing connection? I was under the impression that SSL toolkits would need a little upgrading in order to be able to support STARTTLS, at which point it is not unreasonable to also expect them to support at least SSL3.0. The ink may still be damp on TLS, but SSL3.0 has been out for a while. > >Is there a real need to negotiate the difference between SSL3.0 and TLS? > > Yes. SSL3.0 and TLS have protocol differences, and some implementations > might support one and not the other. But is it necessary to negotiate this outside of the SSL/TLS handshake? Since TLS was given a version number of "3.1" instead of "4.0", this would lead me to consider it likely that a 3.0 implementation and a 3.1 implementation would be able to successfully talk to each other.