Re: draft-hoffman-rfc2487bis-03.txt

Eric Rescorla <[email protected]> 23 Aug 2000 15:37:41 -0700
Newsgroups gmane.ietf.apps-tls
Message-ID <[email protected]>
John Gardiner Myers <[email protected]> writes:
> A server which does not have a certificate installed and which does not
> support any anonymous ciphers SHOULD NOT advertise the STARTTLS keyword
> as it is not currently able to negotiate the use of TLS.
Why this particular exception? Servers which have been configured not
to support any ciphers or any compression algorithms also shoulnd't
advertise.  In short, servers which can't do TLS shoulnd't advertise 
it.
-Ekr