[Prev][Next][Index][Thread]
Re: TLS 1.0 "draft-ietf-tls-protocol-01.txt" Now Available
David P. Kemp wrote:
>
> The TLS base document should specify mandatory-to-implement algorithms
> to promote interoperability. Currently the DES/3DES ciphersuites
> fill that role, but Blowfish or another published and freely-available
> algorithm might conceivably be suitable as the interoperable
> baseline.
>
> TLS "transform" documents could be written to specify the use of many
> other ciphersuites, published or proprietary, including RC2, RC4,
> Blowfish, SAFER, Fortezza(R), etc. This makes it easier to add
> future ciphersuites to TLS without having to re-do the base document
> every time.
I agree, although I'd like to see at least RC4 (or alleged-RC4)
included in the mandatory list. I think the Kerberos work is a
perfect example of how cipher suites can be defined in seperate
documents.
--
You should only break rules of style if you can | Tom Weinstein
coherently explain what you gain by so doing. | tomw@netscape.com
References: