Re: Serious design flaw in STARTLS documents

On Tue, 21 Apr 1998, Harald Tveit Alvestrand wrote:
> I believe the flaw you indicate is generic to any protocol that
> negotiates an integrity or security layer (the same problem arises
> with negotiating GSSAPI protection using SASL).
> 
> As such, there are 2 layers of fixes needed:
> - Document the problem in the SASL specification, and possibly in
>   some document that generically describes "negotiating TLS"
> ...
> It probably needs
> to say that after STARTTLS negotiation, the state is as before EHLO;
> all state is flushed.

I concur with this.  I will change draft-newman-tls-imappop appropriately
for those protocols.

		- Chris