AUTHMETH questions
"Vithalprasad Gaitonde" <[email protected]>
| Newsgroups | gmane.ietf.ldapbis |
|---|---|
| Message-ID | <[email protected]> |
The AUTHMETH draft doesnt comment on what the LDAP server behaviour should be if a client (subsequent to the initial negotiation of the strength of the channel) does a change_cipher_spec and negotiates down the strength of the channel from the one already established. As per tls, a client can do a change_cipher_spec at any time once the initial connection is established. Should the server in such case abandon all out standing operations on that connection and/or close the connection by sending a notice of disconnection ? Should the draft specify any such behaviour. Thanks, Prasad