[standards-jig] A late security comment on JEP-0020

Paul Lloyd paul_lloyd at hp.com
Wed May 15 20:20:14 UTC 2002


Hi,

David Waite wrote:
 
> I might be off my rocker, but I thought this is exactly how SSL
> negotiates such things. You just don't say you will accept a wimpy
> scheme if it is too wimpy for your uses.

Please see sections F.1.2 & F.1.3 of http://www.ietf.org/rfc/rfc2246.txt

It's actually not as simple as just saying no,


  |\/\/\/|        "I DIDN'T DO IT, MAN!"
  |      |
  |      |        Paul Lloyd
  | (o)(o)        Infrastructure Strategic Engineering
  C      _)       Strategy and Architecture Leadership Team
   | ,___|        voice:          650-236-3704
   |   /          FAX:            650-236-3632
  /____\          MSN Messenger:  paul_lloyd at hp.com
 /      \         plloyd at corp.hp.com



More information about the Standards mailing list