On Tue, May 16, 2017 at 01:43:32PM -0400, Richard Barnes wrote: > As has been pointed out elsewhere, other key changes are signaled with a > handshake message (KeyUpdate), so using a handshake message seems more > natural from a protocol point of view.
And as long as the record type goes in the clear, sending these sorts of messages all with the same record type (handshake) seems best from a traffic analysis p.o.v. Nico -- _______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls