On 19 October 2015 at 11:17, Eric Rescorla <e...@rtfm.com> wrote: > Yeah, I think that's riding the nonce far too hard.
On what basis? Any change in the nonce will cause the record decryption to fail. That's the property we're looking for here, isn't it? _______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls