Subject: Re: [Crisp] draft-newton-crisp-iris-xpc-00.txt

From: Andrew Newton <[email-masked]>
Date: Wed, 16 Mar 2005 18:07:39 -0500

> I've already received one private comment regarding it.  In summary, 
> the suggestion was to eliminate the raw TCP aspect and strictly use 
> TLS, having clients specify SSL_NULL_WITH_NULL_NULL cipher suite when 
> no encryption is needed.

Just to follow up, I do not think this is a good idea because:
   1 - it forces people who never need TLS to have TLS
   2 - George's comment ("users think they get encryption")
   3 - Limitation in library support for SSL_NULL_WITH_NULL_NULL
     a - No way to specify cipher lists with Python
         m2crptyo and PyOpenSSL probably give this level of control
     b - JSSE does not support it.
     c - OpenSSL does not support it (openssl ciphers -v).
         if this is correct, that means A LOT of things can't do it

-andy

_______________________________________________
Crisp mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/crisp