Re: Welcome to the ietf-apps-tls mailing list

At 6:26 PM -0700 5/6/97, Dennis Glatting wrote:

>It may be worthwhile to note the potential impact of a MIM
>altering the TLS keyword parameters, e.g., nuke "TLS.10" and
>"SSL3.0" in lieu of "SSL2.0", or nuke the TLS keyword
>altogether.

I'm not sure what you mean by "impact".  Section 5 says:
:After the TLS handshake has been completed, both parties MUST decide
:whether or not to continue based on the authentication and privacy
:achieved.
This is a MUST, not a SHOULD. A MIM altering the keyword would still have
to get by this final check.

>I didn't see anything in the draft that mentioned TLS parameter
>preferential order. I don't know if you want to impose an order.
>If you don't, you may want to explicitly say so.

I didn't think a preferred order was important; that is, if you list it,
you should like it. Do others think an order is useful for something?

--Paul E. Hoffman, Director
--Internet Mail Consortium