Re: Failed TLS negotiation

[Jeffrey Altman <jaltman@xxxxxxxxxxxxxxxxxxxxxx>]

> On Mon, 28 Sep 1998, Jeffrey Altman wrote:
> > I really do not understand why this is considered to be so burdensome.
> 
> In the case of a protocol failure, I'd just close the connection and _not_
> try again -- something serious may be broken if a protocol failure
> happens, and it's better if it gets fixed.

I agree, but that is a _policy_ decision not a question of protocol.  
The important point is that you agree that the connection _must_ be
closed when a protocol failure occurs.

> In the case of a negotiation failure and the "prefer to use TLS" scenario,
> it is desirable to just continue without having to re-open the socket.
> There are lots of legitimate causes of negotiation failures.

I completely agree with this.  I do not believe that the connection
_must_ be closed in response to a negotiation failure.


    Jeffrey Altman * Sr.Software Designer * Kermit-95 for Win32 and OS/2
                 The Kermit Project * Columbia University
              612 West 115th St #716 * New York, NY * 10025
  http://www.kermit-project.org/k95.html * kermit-support@xxxxxxxxxxxxxxxxxx