Subject: [TLS] comment on draft-ietf-tls-pwd-06

From: Aaron Zauner <[email-masked]>
Date: Thu, 26 Mar 2015 22:51:38 +0100

Hi,

Sorry for being terse: I'm wondering why the Document still supports
AES-CBC. Is compatibility down to TLS 1.0 or 1.1 desired? If not; Why
not reduce the number of (vulnerable) ciphersuites by removing AES-CBC?

Thanks,
Aaron