Re: Comments on Mandatory Ciphers and a Proposal

[Christopher Allen <ChristopherA-Lists@xxxxxxxxxxxxx>]

At 3:36 PM -0700 7/24/97, Christopher Allen wrote:
>Allowing Alice Attacker to focus on breaking any MUST cipherspecs, or by
>putting in place a MUST ciphersuite that will have to be replaced in a
>couple of years for security reasons, or that the market just doesn't
>accept that the IESG's decision as to what is "secure enough" is good
>enough -- all of these are bad ideas. There is no harm to strongly
>encouraging with a SHOULD certain ciphersuites, the harm is not mandating
>them.

Last sentence should be:

"There is no harm to strongly encouraging with a SHOULD certain
ciphersuites, the harm *is* mandating certain ciphersuites.