➢ Just to make sure I understand, in this scenario the special-purpose browser could just as easily, today, be a browser with no TLS at all? That is, I don't see why this scenario is specific to the visibility extension. Because you can’t do that with TLS right now. This adds that ability. The idea of having a plaintext signal that allows intermediaries to force users into weakening their security seems to go against the very grain of what TLS tries to do.
_______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls