RE: [TLS] Last Call: draft-ietf-tls-ssl2-must-not-03.txt (Prohibiting SSL Version 2.0) to Proposed Standard

2010-12-02 Thread Glen Zorn
Michael D'Errico [mailto:mike-l...@pobox.com] writes: Glen Zorn wrote: Section 3 says TLS clients MUST NOT send SSL 2.0 CLIENT-HELLO messages. and TLS servers MUST NOT negotiate or use SSL 2.0 and later TLS servers that do not support SSL 2.0 MAY accept version 2.0 CLIENT-HELLO messages

Re: [TLS] Last Call: draft-ietf-tls-ssl2-must-not-03.txt (Prohibiting SSL Version 2.0) to Proposed Standard

2010-12-02 Thread Michael D'Errico
Glen Zorn wrote: Section 3 says TLS clients MUST NOT send SSL 2.0 CLIENT-HELLO messages. and TLS servers MUST NOT negotiate or use SSL 2.0 and later TLS servers that do not support SSL 2.0 MAY accept version 2.0 CLIENT-HELLO messages as the first message of a TLS handshake for interoperability

Re: [TLS] Last Call: draft-ietf-tls-ssl2-must-not-03.txt (Prohibiting SSL Version 2.0) to Proposed Standard

2010-12-02 Thread Marsh Ray
On 12/02/2010 08:01 AM, Glen Zorn wrote: Maybe I just don't understand the word use. It seems like if a server accepts a protocol message it's using the protocol... Hard to argue with that logic...but... :-) The Client Hello message is the first message sent in the protocol. Its format