On 04/08/2013 09:27 PM, Paul Suhler wrote:
I see that the internet draft for TLS False Start was withdrawn
(https://datatracker.ietf.org/doc/draft-bmoeller-tls-falsestart/). More
discussion here:
http://blog.cryptographyengineering.com/2012/04/so-long-false-start-we-hardly-knew-ya.html
Yes, above link (as well as
http://www.imperialviolet.org/2012/04/11/falsestart.html) mentions that
False Start is disabled for all sites except the ones supporting the
Next Protocol Negotiation Extension (~ sites supporting SPDY IIUC).
Please correct me if that information is out of date, but as of now to
me it seems like False Start could be used anyhow if adopted carefully,
either only with NPN sites or a white list etc.
Peter
Paul
-----Original Message-----
From: owner-openssl-...@openssl.org [mailto:owner-openssl-...@openssl.org] On
Behalf Of Peter Hartmann
Sent: Monday, April 08, 2013 8:44 AM
To: openssl-dev@openssl.org
Subject: TLS False Start support
Hello,
I assume it is not planned to implement TLS False Start in OpenSSL, is it?
This URL mentions there is a patch available:
https://technotes.googlecode.com/git/falsestart.html , but it seems it has
never been merged...
Thanks,
Peter
---------------------------------------------------------------------
This transmission (including any attachments) may contain confidential
information, privileged material (including material protected by the
solicitor-client or other applicable privileges), or constitute non-public
information. Any use of this information by anyone other than the intended
recipient is prohibited. If you have received this transmission in error,
please immediately reply to the sender and delete this information from your
system. Use, dissemination, distribution, or reproduction of this transmission
by unintended recipients is not authorized and may be unlawful.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev@openssl.org
Automated List Manager majord...@openssl.org
----------------------------------------------------------------------
The information contained in this transmission may be confidential. Any
disclosure, copying, or further distribution of confidential information is not
permitted unless such privilege is explicitly granted in writing by Quantum.
Quantum reserves the right to have electronic communications, including email
and attachments, sent across its networks filtered through anti virus and spam
software programs and retain such messages in order to comply with applicable
data security and retention requirements. Quantum is not responsible for the
proper and complete transmission of the substance of this communication or for
any delay in its receipt.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev@openssl.org
Automated List Manager majord...@openssl.org
---------------------------------------------------------------------
This transmission (including any attachments) may contain confidential
information, privileged material (including material protected by the
solicitor-client or other applicable privileges), or constitute non-public
information. Any use of this information by anyone other than the intended
recipient is prohibited. If you have received this transmission in error,
please immediately reply to the sender and delete this information from your
system. Use, dissemination, distribution, or reproduction of this transmission
by unintended recipients is not authorized and may be unlawful.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev@openssl.org
Automated List Manager majord...@openssl.org