On 4 November 2015 at 11:16, Yoav Nir <ynir.i...@gmail.com> wrote: > Can’t we just say that all previous uses of tis-unique will instead get an > exporter generated with the label “tis-unique” ?
That was my thought here: redefine what it means to generate tls-unique. That's part of why I asked about the size. We should ensure that clients are not made sad if they receive a tls-unique that is longer than 96 bits. We could backport this to 1.2, but I'm not sure whether this is a new feature or whether it's a bug fix. If it is the former, I'm not that enthusiastic about a backport. _______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls
