Subject: Re: [TLS] Comments on various things on agenda (Was: Re: TLS Interim - update and agenda)

From: Peter Gutmann <[email-masked]>
Date: Fri, 13 Mar 2015 08:23:54 +0000

Ilari Liusvaara <[email-masked]> writes:

>Here by backwards compatiblity, I interpret:
>
>"Possiblity to securely downnegotiate to earlier versions without reconnect."

Ah, I see.  In that case why not just have a TLS 1.x-compatible client hello
for TLS 2.0, in the same way that we had the SSLv2-compatible client hello for
SSLv3 and TLS 1.x?  That means you get backwards compatibility without having
to drag a large amount of TLS 1.x baggage around in TLS 2.0.

Peter.