[Security] TLS Certificates Verification

[Peter Saint-Andre]

Dirk Meyer wrote:
> "Eric Rescorla" wrote:
>> 1. A PAKE mode (SRP)[0]
>> 2. Session resumption.
> 
> After some searching I found only a draft about SRP and TLS, but
> openssl seems to support it which is a good sign. I want to avoid
> using something libraries do not support.

You're looking for this:

http://tools.ietf.org/html/rfc5054

/psa

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 7338 bytes
Desc: S/MIME Cryptographic Signature
Url : http://mail.jabber.org/pipermail/security/attachments/20080819/fd0ef23d/attachment.bin