Re: 9.2.2 Cipher fallback and FF<->Jetty interop problem from Martin Thomson on 2014-09-05 (ietf-http-wg@w3.org from July to September 2014)

From: Martin Thomson <martin.thomson@gmail.com>
Date: Fri, 5 Sep 2014 16:37:27 -0700
To: Michael Sweet <msweet@apple.com>
Cc: Simone Bordet <simone.bordet@gmail.com>, Patrick McManus <mcmanus@ducksong.com>, Greg Wilkins <gregw@intalio.com>, HTTP Working Group <ietf-http-wg@w3.org>
Message-ID: <CABkgnnVqoi1Bfkf-sknQTxOpeKHsChmWzXiQ+y2gDZpq2PonPA@mail.gmail.com>

On 5 September 2014 15:35, Michael Sweet <msweet@apple.com> wrote:
> RFC 5246 requires a conforming implementation to be able to negotiate TLS_RSA_WITH_AES_128_CBC_SHA.  HTTP/2 requires conformance to RFC 5246 but forbids negotiation of TLS_RSA_WITH_AES_128_CBC_SHA.  Do you not see the problem this creates?

Yes.  And it would be a problem if we hadn't already fixed it.

Received on Friday, 5 September 2014 23:37:55 UTC