* And, I don't buy the idea that if this extension is standardized that it will be implemented in commonly-used browsers.
And that is a risk you are willing for the entire public Internet to take? And what about the fact that it provides a cleartext signal as to whether or not a client is willing to let itself be MiTM’d, does that bother you?
_______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls