[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Basis for disagreement



I think a significant part of our basic problem is the answers to these two
questions:
  1) Is complete interoperability in basic conflict with security?
  2) Which should be more important?

I believe the answers are:
  1) Yes.
  2) Security.

Which leads to my stance. I'd like to understand whether people who want
MUST cipher suites:
  i) Agree with point 1, but not with point 2.
 ii) Agree with point 2, but not with point 1.
iii) Disagee with both.
 iv) Agree with both, but don't follow my path to my belief that MUST is wrong.

 - Tim

Tim Dierks - timd@xxxxxxxxxxxxx - www.consensus.com
     Software Haruspex - Consensus Development
  Developer of SSL Plus: SSL 3.0 Integration Suite