Dave Garrett wrote:
> On Thursday, July 23, 2015 06:49:06 am Aaron Zauner wrote:
>> I mean I kinda agree that 'insufficent security' is a misleading name,
>> but as it has been used for decades in TLS I'm a bit hesitant if it's a
>> good idea to change the name now.
> 
> Alternate bikesheddy response: what about renaming it to 
> "insufficient_cipher_security" and adding a new "insufficient_dh_security"?
> 
> That keeps the legacy naming, but modifies it to include actual specific 
> meaning, rather than a total replacement.
> 

Fine with that. Now that I think about it again; I'm also fine with the
original proposal. The thing is 'insufficient security' has a nicer ring
to it than 'unsupported XYZ'.

Aaron

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
TLS mailing list
TLS@ietf.org
https://www.ietf.org/mailman/listinfo/tls

Reply via email to