Re: Handling NULL key exchange for NULL_ ciphersuite

From: David P. Kemp <dpkemp@missi.ncsc.mil>
Date: Mon, 10 Feb 1997 10:00:15 -0500
To: ietf-tls@w3.org
Message-Id: <199702101500.KAA09796@argon.ncsc.mil>

> 
> To close out this issue, I propose that the TLS spec forbid
> negotiating to NULL_WITH_NULL_NULL. I understand
> the argument for testing, but I suspect the risks of this in
> practical deployment make it dangerous.
> 
> Win Treese

I concur.

Received on Monday, 10 February 1997 10:00:28 UTC