I'd like to know what the 'expected'/'best' mechanism in the following case
is:
 - client (c2s) or server (s2s) connects to remote host
 - remote host announces it supports, but does not require TLS
 - TLS negotiations, start but initially fail (due to broken cert chain,
expired certs, etc)
 - remote server announces failure, and drops the tcp connection

then what?

Should the connecting entity cache this TLS failure, and retry without TLS,
or is this treated as a impossible to connect scenario? (which it isn't
because TLS isn't required to make the connection)

Comments?

-- 
- Norman Rasmussen
- Email: [EMAIL PROTECTED]
- Home page: http://norman.rasmussen.co.za/
_______________________________________________
JDev mailing list
FAQ: http://www.jabber.org/discussion-lists/jdev-faq
Forum: http://www.jabberforum.org/forumdisplay.php?f=20
Info: http://mail.jabber.org/mailman/listinfo/jdev
Unsubscribe: [EMAIL PROTECTED]
_______________________________________________

Reply via email to