Subject: Re: [TLS] padding bug

From: Peter Gutmann <[email-masked]>
Date: Wed, 25 Sep 2013 11:25:46 +0000

Ben Laurie <[email-masked]> writes:
>On 24 September 2013 17:31, Hovav Shacham <[email-masked]> wrote:
>> I would prefer an approach that deprecates existing suites in favor of
>> non-CBC authenticated encryption modes.
>
>That means requiring TLS 1.2, which is a far more complex update to existing
>s/w than this change.

You beat me to it (see: email backlog).  In fact this issue has been covered
in the draft since -01.

Peter.