IETF RFC 5746
Transport Layer Security (TLS) Renegotiation Indication Extension
active, Most Current
Buy Now
| Organization: | IETF |
| Publication Date: | 1 February 2010 |
| Status: | active |
| Page Count: | 15 |
scope:
Introduction
TLS [RFC5246] allows either the client or the server to initiate renegotiation -- a new handshake that establishes new cryptographic parameters. Unfortunately, although the new handshake is carried out using the cryptographic parameters established by the original handshake, there is no cryptographic binding between the two. This creates the opportunity for an attack in which the attacker who can intercept a client's transport layer connection can inject traffic of his own as a prefix to the client's interaction with the server.
Document History
IETF RFC 5746
February 1, 2010
Transport Layer Security (TLS) Renegotiation Indication Extension
Introduction
TLS [RFC5246] allows either the client or the server to initiate renegotiation -- a new handshake that establishes new cryptographic parameters. Unfortunately, although the new...