Subject: Re: [dane] #6: Downgrade attacks : What to do if DANE fails

From: "dane issue tracker" <[email-masked]>
Date: Mon, 09 Jan 2012 01:37:11 -0000

#6: Downgrade attacks : What to do if DANE fails

Changes (by warren@…):

 * status:  reopened => closed
 * resolution:   => fixed

Comment:

 "Do we state that a client MUST fail the TLS handshake if it cannot get a
 secure or verified insecure response to the TLSA query?"

 The document now covers this, and so I am closing this issue.

 Section 4.4 ( http://tools.ietf.org/html/draft-ietf-dane-
 protocol-14#section-4.4 )

 W

-- 
--------------------------------+---------------------
 Reporter:  mlepinsk@…          |       Owner:
     Type:  defect              |      Status:  closed
 Priority:  major               |   Milestone:
Component:  protocol            |     Version:
 Severity:  Active WG Document  |  Resolution:  fixed
 Keywords:                      |
--------------------------------+---------------------

Ticket URL: <http://trac.tools.ietf.org/wg/dane/trac/ticket/6#comment:5>
dane <http://tools.ietf.org/dane/>