On Wed, Jul 4, 2018 at 7:55 PM Hubert Kario <hka...@redhat.com> wrote: > Despite this, is it correct to terminate a connection with "illegal_parameter" > upon receiving a Finished handshake message with a 100 byte payload? or a 20 > byte payload? My opinion is that it is not, "decode_error" is more specific so > it should be used instead.
When there are multiple problems with a message, why do we need to accept just one of the possible alerts? That assumes either a very particular order of processing, or a strict precedence order for errors. Like Rich says, there is a degree of imprecision in our error reporting, but - for me - that's OK. _______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls