Re: [TLS] Extensions and session resumption

[Eric Rescorla <ekr@xxxxxxxxxxxxxxxxxxxx>]

Here's my lightly revised version of this text post comments
from Mike and Pasi. 

Joe, can you pls. issue a last call for comments on this text?

Thanks,
-Ekr


In 7.4.1.4, after "as described in Section 12" and before "There are
subtle":

   An extension type MUST NOT appear in the ServerHello unless the
   same extension type appeared in the corresponding ClientHello.  If
   a client receives an extension type in ServerHello that it did not
   request in the associated ClientHello, it MUST abort the handshake
   with an unsupported_extension fatal alert.

   Nonetheless, "server-oriented" extensions may be provided in the
   future within this framework.  Such an extension (say, of type x)
   would require the client to first send an extension of type x in
   ClientHello with empty extension_data to indicate that it supports
   the extension type.  In this case, the client is offering the
   capability to understand the extension type, and the server is
   taking the client up on its offer.

   When multiple extensions of different types are present in the
   ClientHello or ServerHello messages, the extensions MAY appear in
   any order. There MUST NOT be more than one extension of the same
   type.

   Finally, note that extensions can be sent both when starting a new
   session and when requesting session resumption.  Indeed, a client
   that requests session resumption does not in general know whether
   the server will accept this request, and therefore it SHOULD send
   the same extensions as it would send if it were not attempting
   resumption.	

   In general, the specification of each extension type needs to
   describe the effect of the extension both during full handshake and
   session resumption. Most current TLS extensions are relevant only
   when a session is initiated: when an older session is resumed, the
   server does not process these extensions in Client Hello, and does
   not include them in Server Hello. However, some extensions may
   specify different behavior during session resumption.


Also, we should add to end of Section 7.4.1.4.1:

   When performing session resumption, this extension is not included
   in Server Hello, and the server ignores the extension in Client
   Hello (if present).


_______________________________________________
TLS mailing list
TLS@xxxxxxxx
https://www.ietf.org/mailman/listinfo/tls