>I don’t think the DNS record should dictate the padding so precisely. I’d like >my client to send 260 (or whatever the right number is) whenever possible. As >specified, short TTLs and varying padding could be a problem.
I think varying padding to some fixed multiple is a good trade-off. Apparently the next published draft will say that.
_______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls