Re: [lemonade] QUICKSTART update

[Tony Finch <dot at dotat.at>]

On Wed, 16 May 2007, Chris Newman wrote:
>
> It's my opinion that the way profile B interacts with the TLS layer is
> problematic for implementations. [...]
>
> The problem is that activating the TLS layer is a software state change
> that takes over both socket directions.  So it really shouldn't happen
> until the only subsequent protocol will be TLS packets.  Having secure
> and non-secure packets in-transit at the same time is not a good idea
> from a state management point of view.

Thanks for looking into this, and especially for having a go at
implementing it. I have to agree even though it makes me sad that this
means it probably isn't possible to safely eliminate the last RTT. In the
next revision I'll replace pipelined STARTTLS with QTLS, and make sure
that the cleartext/TLS boundary is simple.

Tony.
-- 
f.a.n.finch  <dot at dotat.at>  http://dotat.at/
VIKING NORTH UTSIRE SOUTH UTSIRE: NORTHERLY BACKING SOUTHERLY 4, INCREASING 5
TO 7, PERHAPS GALE 8 LATER. SLIGHT, BECOMING MODERATE OR ROUGH. RAIN LATER.
MODERATE OR GOOD.


_______________________________________________
lemonade mailing list
lemonade at ietf.org
https://www1.ietf.org/mailman/listinfo/lemonade
Supplemental Web Site:
http://www.standardstrack.com/ietf/lemonade