From f75f7322b9318efe25d83c77c8a29ebaefad07fb Mon Sep 17 00:00:00 2001 From: Nick Mathewson Date: Fri, 29 Jan 2010 16:39:27 -0500 Subject: Clarify a paragraph in prop 169. --- doc/spec/proposals/169-eliminating-renegotiation.txt | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) (limited to 'doc') diff --git a/doc/spec/proposals/169-eliminating-renegotiation.txt b/doc/spec/proposals/169-eliminating-renegotiation.txt index f07ca1e96..8a8ae6e1f 100644 --- a/doc/spec/proposals/169-eliminating-renegotiation.txt +++ b/doc/spec/proposals/169-eliminating-renegotiation.txt @@ -314,10 +314,13 @@ Target: 0.2.2 cells. * Send a NETINFO cell. Wait for a CERT and a NETINFO cell from the server. - * If the CERT cell is a good cert signing the public - key in the x.509 certificate we got during the TLS - handshake, we connected to the server with that - identity key. Otherwise close the connection. + * If the CERT cell contains a valid self-identity cert, + and the identity key in the cert can be used to check + the signature on the x.509 certificate we got during + the TLS handshake, then we know we connected to the + server with that identity. If any of these checks + fail, or the identity key was not what we expected, + then we close the connection. * Once the NETINFO cell arrives, continue as before. And V3+ responder behavior now looks like this: -- cgit v1.2.3