If you keep using the same [EC]DH keys indefinitely, you're merely pseudonymous, not anonymous :-)
Without a naming precedent, I'd still prefer [EC]DHE_anon over [EC]DH_anon (and possibly "unauth" over "anon", because "anon" could be interpreted as overpromising), but given the existing naming pattern started by DH_anon, I prefer consistency with that one. Bodo
_______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls