[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[TLS] DH_anon

It is said that DH_anon is subject to man-in-the-middle
attacks, but that is only true during the first handshake.
If you already have established an authenticated session,
you can use DH_anon to renegotiate.  I think it would be
valid to "un-deprecate" DH_anon, and add a disclaimer
that it should only be used for renegotiation.

Mike

_______________________________________________
TLS mailing list
TLS@xxxxxxxxxxxxxx
https://www1.ietf.org/mailman/listinfo/tls