Re: impact of 9.2.2 changes and discussions on opportunistic encryption draft from Martin Thomson on 2014-10-31 (ietf-http-wg@w3.org from October to December 2014)

From: Martin Thomson <martin.thomson@gmail.com>
Date: Fri, 31 Oct 2014 10:24:48 -0700
To: Robert Collins <robertc@robertcollins.net>
Cc: Erik Nygren <erik@nygren.org>, "ietf-http-wg@w3.org Group" <ietf-http-wg@w3.org>
Message-ID: <CABkgnnX0dtjpP+ydHyE0qfoEz5B0P4339_5TjQnpySYJUEB3LQ@mail.gmail.com>

On 30 October 2014 19:35, Robert Collins <robertc@robertcollins.net> wrote:
> Also wouldn't it deliver a trivial downgrade attack to folk who can
> intercept and alter traffic?


This is already the case.  Hence this being opportunistic.

Received on Friday, 31 October 2014 17:25:17 UTC