Ø Hm, without any SSL_OP_... settings, the expectation generally is that we kind of sort of follow the specs
Ø and don't do any weird stuff like this for interoperability's sake. If we switch semantics around for certain Ø options, the resulting inconsistencies would make all that even more confusing. +1 -- Principal Security Engineer Akamai Technology Cambridge, MA