[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: draft-hoffman-rfc2487bis-03.txt



At 10:28 AM +0200 8/29/00, Bodo Moeller wrote:
If, after having issued the STARTTLS command, the client finds out
that some failure prevents it from actually starting a TLS handshake,
then it should just abort the connection.

I'm OK with this if everyone else is. It feels weird to me on a protocol level, but I'm not an implementor. More opinions are welcome.


I think the specification should state that servers MUST be able
to understand backwards compatible Client Hello messages (provided
that client_version is TLS 1.0 or later), and that clients MAY
use backwards compatbile Client Hellos messages.  Of course neither
clients or servers can be required to actually offer the full
protocols because the specification is just about TLS.

Sounds OK to me. Other voices?


--Paul Hoffman, Director
--Internet Mail Consortium