| commit | 380d00246b9a9e1b48b6eeae28215aa761267f5e | |
| author | Nick Mathewson <nickm@torproject.org> | |
| Wed, 27 Jan 2010 22:08:04 +0000 (27 17:08 -0500) | ||
| committer | Nick Mathewson <nickm@torproject.org> | |
| Thu, 28 Jan 2010 05:04:25 +0000 (28 00:04 -0500) | ||
| tree | b9d2cc9aea435391320b9fccf784e9500e2ce566 | treesnapshot (tar.gz zip) |
| parent | 02889bae21d31b3c7d8a5bc2dacd5360d479874c | commitdiff |
Proposal 169: Eliminate TLS renegotiation
I propose a backward-compatible change to the Tor connection
establishment protocol to avoid the use of TLS
renegotiation.
Rather than doing a TLS renegotiation to exchange
certificates and authenticate the original handshake, this
proposal takes an approach similar to Steven Murdoch's
proposal 124, and uses Tor cells to authenticate the
parties' identities once the initial TLS handshake is
finished.
I propose a backward-compatible change to the Tor connection
establishment protocol to avoid the use of TLS
renegotiation.
Rather than doing a TLS renegotiation to exchange
certificates and authenticate the original handshake, this
proposal takes an approach similar to Steven Murdoch's
proposal 124, and uses Tor cells to authenticate the
parties' identities once the initial TLS handshake is
finished.
| doc/spec/proposals/000-index.txt | diffblobblamehistory | |
| doc/spec/proposals/169-eliminating-renegotiation.txt | [new file with mode: 0644] | blob |