Re: support for SSL 2.0 in StartTLS-capable apps?
"Paul E. Hoffman" <[email protected]> Fri, 16 May 1997 14:40:57 -0700
| Newsgroups | gmane.ietf.apps-tls |
|---|---|
| Message-ID | <v03102812afa284a28fe7@[165.227.249.100]> |
At 7:03 AM -0700 5/16/97, Dennis Glatting wrote: >SSL 2.0 has several weaknesses. Since there are few--if >any--implementations of SMTP with SSL it would be better to >exclude it. The same argument may be true for SSL 3.0. Actually, with the method that Jeff and Bob are suggesting, there is no need to "exclude" SSL 3.0. The quote they gave shows a way for the client to essentially query the server for which version it runs and take whatever the server hands back. --Paul E. Hoffman, Director --Internet Mail Consortium