Re: Failed TLS negotiation

On Mon, 28 Sep 1998, Jeffrey Altman wrote:
> But case number 3 is not about negotiation failures, it is about
> protocol failures.  The state of the connection when the protocol
> fails must be unknown.  If it were known then the protocol could
> continue.  If the protocol failed it means that something unexpected
> happened that the protocol and the protocol is unable to continue to
> completion.  The end result is that you do not have a choice but to
> close the connection and start over again and refuse to negotiate TLS
> on the second try.
> 
> I really do not understand why this is considered to be so burdensome.

In the case of a protocol failure, I'd just close the connection and _not_
try again -- something serious may be broken if a protocol failure
happens, and it's better if it gets fixed.

In the case of a negotiation failure and the "prefer to use TLS" scenario,
it is desirable to just continue without having to re-open the socket.
There are lots of legitimate causes of negotiation failures.

		- Chris