Re: ? re SSL message authentication

From: Henrick Hellström (henrick.hellstrm_at_telia.com)
Date: 03/19/04


Date: Fri, 19 Mar 2004 13:59:52 GMT

Steve Reingold wrote:
> Greetings! I can't seem to find an answer to my question anywhere. Hope I
> can find information here. I understand that SSL supports message
> authentication to uncover unanticipated changes to the data while in
> transit. Fine. What happens when SSL detects something wrong with the data?
> Eg. Is someone notified (sender/receiver)?

1. The receiver discards the data.
2. The receiver (optionally) notifies the sender by returning a fatal alert.
3. The connection is closed.

The "receiver" and "sender" are SSL peers. Depending on the
implementation the SSL code might or might not notify the application
code, and depending on the implementation the application code might or
might not notify the application user.


Quantcast