Re: support for SSL 2.0 in StartTLS-capable apps?

"Paul E. Hoffman" <[email protected]> Fri, 16 May 1997 14:40:57 -0700
Newsgroups gmane.ietf.apps-tls
Message-ID <v03102812afa284a28fe7@[165.227.249.100]>
At 7:03 AM -0700 5/16/97, Dennis Glatting wrote:
>SSL 2.0 has several weaknesses. Since there are few--if
>any--implementations of SMTP with SSL it would be better to
>exclude it. The same argument may be true for SSL 3.0.

Actually, with the method that Jeff and Bob are suggesting, there is no
need to "exclude" SSL 3.0. The quote they gave shows a way for the client
to essentially query the server for which version it runs and take whatever
the server hands back.

--Paul E. Hoffman, Director
--Internet Mail Consortium