> today, all an attacker has to do is follow the protocol and specify a > bogus URL in the client hello. Sorry, I meant the CertificateURL message. Mike _______________________________________________ TLS mailing list TLS@xxxxxxxx https://www.ietf.org/mailman/listinfo/tls