Mads Toftum <[EMAIL PROTECTED]> writes:
> On Mon, May 22, 2000 at 01:14:03PM -0500, James H. Cloos Jr. wrote:
> > Any idea of a timeframe for rfc2817 support?
> >
> > (I'd offer to help, but I still do not trust the us export issues,
> > even though I am abroad at the moment....)
> >
> > It seems straightforward, though it looks like for clients to support
> > it well, they also need good support for persistant connections....
> >
> It would probably make sense to wait for openssl to support this and
> IMHO without clients there really is no need to work on this yet. I
> don't really think we're going to see this anytime soon unless M$
> suddenly decides to do something like it.
It doesn't make sense for OpenSSL to support it. It's a purely
HTTP feature.
That said, I agree that it's probably not worth doing at this time.
It's not likely to be suported by browsers any time soon.
In fact, if you read rfc2817, it implies as much:
In the nearly two years since, there has been broad acceptance of the
concept behind this proposal, but little interest in implementing
alternatives to port 443 for generic Web browsing. In fact, nothing
in this memo affects the current interpretation of https: URIs.
However, new application protocols built atop HTTP, such as the
Internet Printing Protocol [7], call for just such a mechanism in
order to move ahead in the IETF standards process.
-Ekr
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]