Viktor Dukhovni <ietf-d...@dukhovni.org> writes:

>I can't answer why, but I know what and when:

I was trying to avoid finger-pointing so I didn't go through the changelog to
see whodunnit, I was more interested in the motivation.  Same for Apple, why
would you implement something that pretty much no-one else (at the time)
supported, and for good reason?

Having said that though:

DH-DSS-CAMELLIA256-SHA  SSLv3 Kx=DH/DSS   Au=DH   Enc=Camellia(256) Mac=SHA1
DH-DSS-CAMELLIA128-SHA  SSLv3 Kx=DH/DSS   Au=DH   Enc=Camellia(128) Mac=SHA1
DH-DSS-SEED-SHA         SSLv3 Kx=DH/DSS   Au=DH   Enc=SEED(128) Mac=SHA1
DH-DSS-DES-CBC-SHA      SSLv3 Kx=DH/DSS   Au=DH   Enc=DES(56)   Mac=SHA1
DH-RSA-DES-CBC-SHA      SSLv3 Kx=DH/RSA   Au=DH   Enc=DES(56)   Mac=SHA1

that sort of stuff just compounds the WTF.  Static DH + DSA + single DES, added 
in 2012.
W. T. F.

Peter.
_______________________________________________
TLS mailing list
TLS@ietf.org
https://www.ietf.org/mailman/listinfo/tls

Reply via email to