On Mar 23, 2010, at 22:42, Jon Callas wrote:

> If you need to rekey, tear down the SSL connection and make a new one. There 
> should be a higher level construct in the application that abstracts the two 
> connections into one session.

... which will have its own subtleties and hence probability of failure.

Stephan
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majord...@metzdowd.com

Reply via email to