TLS Renegotiation problem

[Steve Dispensa]

On 11/10/09 12:13 PM, "Florian Weimer" <fw at deneb.enyo.de> wrote:

> * Simon Josefsson:
> 
>> So, in summary, given (my) current knowledge there is no need to either
>> patch GnuTLS or any server application using GnuTLS.
> 
> But GNUTLS would have to implement the extension to secure connections
> to servers which support renegotiation.

(...which support safe renegotiation using the extension - no such thing as
safe renegotiation absent both client and server supporting the extension.)

 -Steve