Re: r.e. tls/ssl negotiation
John Gardiner Myers <[email protected]>
| Newsgroups | gmane.ietf.apps-tls |
|---|---|
| Message-ID | <[email protected]> |
On Wed, 7 May 1997, Rodney Thayer wrote: > Are you asking for TLS to do more negotiation or for SSL3 to do more > negotiation? I was expressing frustration at a rather annoying design flaw in SSL, which seems to also exist in TLS. This flaw is the failure of the protocol to be forward-compatible, as evidenced by the need to negotiate outside of SSL which version of the protocol is to be used. As Paul Hoffman aptly points out, this is not something this forum can fix in TLS. So, we express hold our noses and deal with it at the application layer.