On Wed, 2016-09-21 at 13:36 -0700, Eric Rescorla wrote: > > > I don't see how this is appreciably easier than just having the > client offer one and then the server HRR.
If I have ten PSK identities I can offer, it may take nine round-trips before I send the one you want. If I list them all in my first ClientHello and you *tell* me which one you want, that's only one more round-trip. -- dwmw2
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls