Outstanding operations after TLS closure/renegotiation
Hallvard B Furuseth <[email protected]>
| Newsgroups | gmane.ietf.ldapbis |
|---|---|
| Message-ID | <[email protected]> |
Protocol-30 4.14.3 (Removal of the TLS Layer) says: > After the TLS layer has been removed, the server MUST NOT send > responses to any request message received before the TLS closure > alert. Thus, clients wishing to receive responses to messages sent > while the TLS layer is intact MUST wait for those message responses > before sending the TLS closure alert. Didn't we have some text clarifying that the server can either complete such operations without sending a response, or abandon them? I don't see that here. How about outstanding operations after TLS ciphersuite renegotiation? I would think they have the same problem as we'd have with sending responses after closure. At least if a poorer cipher is negotiated, but it would be messy to try to maintain some ranking of which renegotiations should drop responses and which ones should not. -- Hallvard