Re: 9.2.2 Cipher fallback and FF<->Jetty interop problem from Martin Thomson on 2014-09-24 (ietf-http-wg@w3.org from July to September 2014)

From: Martin Thomson <martin.thomson@gmail.com>
Date: Wed, 24 Sep 2014 02:26:54 -0700
To: Simone Bordet <simone.bordet@gmail.com>
Cc: Eric Rescorla <ekr@rtfm.com>, Roland Zink <roland@zinks.de>, HTTP Working Group <ietf-http-wg@w3.org>
Message-ID: <CABkgnnVMtjxWrJs8HhcaX7C1jFUKS=VYKparaFfAEDXYXsDVwA@mail.gmail.com>

On 24 September 2014 02:23, Simone Bordet <simone.bordet@gmail.com> wrote:
> A polyglot client that can speak multiple protocols (e.g. h1, h2)
> cannot just disable ciphers globally only because one of those
> protocols has special needs, also considering the client has no idea
> what protocol will be chosen.

But a polyglot can ensure that it understands the implications of
enabling suite X before it does so.  For all of the protocols it
speaks.

Received on Wednesday, 24 September 2014 09:27:21 UTC