Subject: [TLS] DH_anon

From: Mike <[email-masked]>
Date: Sun, 19 Nov 2006 12:29:11 -0800

It is said that DH_anon is subject to man-in-the-middle
attacks, but that is only true during the first handshake.
If you already have established an authenticated session,
you can use DH_anon to renegotiate.  I think it would be
valid to "un-deprecate" DH_anon, and add a disclaimer
that it should only be used for renegotiation.

Mike

_______________________________________________
TLS mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/tls