Viktor Dukhovni <ietf-d...@dukhovni.org> writes: >I can't answer why, but I know what and when:
I was trying to avoid finger-pointing so I didn't go through the changelog to see whodunnit, I was more interested in the motivation. Same for Apple, why would you implement something that pretty much no-one else (at the time) supported, and for good reason? Having said that though: DH-DSS-CAMELLIA256-SHA SSLv3 Kx=DH/DSS Au=DH Enc=Camellia(256) Mac=SHA1 DH-DSS-CAMELLIA128-SHA SSLv3 Kx=DH/DSS Au=DH Enc=Camellia(128) Mac=SHA1 DH-DSS-SEED-SHA SSLv3 Kx=DH/DSS Au=DH Enc=SEED(128) Mac=SHA1 DH-DSS-DES-CBC-SHA SSLv3 Kx=DH/DSS Au=DH Enc=DES(56) Mac=SHA1 DH-RSA-DES-CBC-SHA SSLv3 Kx=DH/RSA Au=DH Enc=DES(56) Mac=SHA1 that sort of stuff just compounds the WTF. Static DH + DSA + single DES, added in 2012. W. T. F. Peter. _______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls