question on cipher suites
"Kyle Meadors" <[email protected]> Tue, 21 Jun 2005 13:58:56 -0500
| Newsgroups | gmane.ietf.ediint |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format.
------=_NextPart_000_00D3_01C57669.5E069320
Content-Type: text/plain;
charset="windows-1250"
Content-Transfer-Encoding: 7bit
An issue was recently brought up in regards to using TLS in AS3. Within the
TLS handshaking, the connecting AS3 application only uses one cipher, 3DES,
in the handshaking. In this case, the FTP server receiving the connection
does not support 3DES but does support others. Since the AS3 app does not
support anything but 3DES, it can not work through the handshaking to find a
cipher both agree on.
Would it be necessary to state something within the AS3 draft about
supporting a specific set of ciphers. Or, is this outside the scope of AS3
since it may lie only with the FTP server be beyond the control of the AS3
application.
Kyle Meadors
Principal, Test Process
Drummond Group Inc.
615.384.5006
--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.323 / Virus Database: 267.7.8/22 - Release Date: 6/17/2005
------=_NextPart_000_00D3_01C57669.5E069320
Content-Type: text/html;
charset="windows-1250"
Content-Transfer-Encoding: quoted-printable
<html xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns=3D"http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dwindows-1250">
<meta name=3DGenerator content=3D"Microsoft Word 11 (filtered medium)">
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:Arial;
color:windowtext;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=3DEN-US link=3Dblue vlink=3Dpurple>
<div class=3DSection1>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>An issue was recently brought up in regards to using =
TLS in
AS3. Within the TLS handshaking, the connecting AS3 application only =
uses one cipher,
3DES, in the handshaking. In this case, the FTP server receiving the =
connection
does not support 3DES but does support others. Since the AS3 app does =
not
support anything but 3DES, it can not work through the handshaking to =
find a
cipher both agree on.<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>Would it be necessary to state something within the =
AS3
draft about supporting a specific set of ciphers. Or, is this outside =
the scope
of AS3 since it may lie only with the FTP server be beyond the control =
of the
AS3 application.<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>Kyle Meadors</span></font><o:p></o:p></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>Principal, Test Process</span></font><o:p></o:p></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>Drummond Group Inc.</span></font><o:p></o:p></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>615.384.5006</span></font><o:p></o:p></p>
<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
</body>
</html>
<BR>
<P><FONT SIZE=3D2>--<BR>
No virus found in this outgoing message.<BR>
Checked by AVG Anti-Virus.<BR>
Version: 7.0.323 / Virus Database: 267.7.8/22 - Release Date: =
6/17/2005<BR>
</FONT> </P>
------=_NextPart_000_00D3_01C57669.5E069320--