diff options
| author | Nick Mathewson <nickm@torproject.org> | 2010-01-29 16:39:27 -0500 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2010-01-29 16:39:27 -0500 |
| commit | f75f7322b9318efe25d83c77c8a29ebaefad07fb (patch) | |
| tree | 6afdf2d4f98baacd4a971f8027ac37916bb6f4d5 /doc | |
| parent | e015fe8b098d5058a6e8fa5c316800504520303b (diff) | |
| download | tor-f75f7322b9318efe25d83c77c8a29ebaefad07fb.tar.gz tor-f75f7322b9318efe25d83c77c8a29ebaefad07fb.zip | |
Clarify a paragraph in prop 169.
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/spec/proposals/169-eliminating-renegotiation.txt | 11 |
1 files changed, 7 insertions, 4 deletions
diff --git a/doc/spec/proposals/169-eliminating-renegotiation.txt b/doc/spec/proposals/169-eliminating-renegotiation.txt index f07ca1e963..8a8ae6e1fd 100644 --- a/doc/spec/proposals/169-eliminating-renegotiation.txt +++ b/doc/spec/proposals/169-eliminating-renegotiation.txt @@ -314,10 +314,13 @@ Target: 0.2.2 cells. * Send a NETINFO cell. Wait for a CERT and a NETINFO cell from the server. - * If the CERT cell is a good cert signing the public - key in the x.509 certificate we got during the TLS - handshake, we connected to the server with that - identity key. Otherwise close the connection. + * If the CERT cell contains a valid self-identity cert, + and the identity key in the cert can be used to check + the signature on the x.509 certificate we got during + the TLS handshake, then we know we connected to the + server with that identity. If any of these checks + fail, or the identity key was not what we expected, + then we close the connection. * Once the NETINFO cell arrives, continue as before. And V3+ responder behavior now looks like this: |