« first day (1482 days earlier)   

9:41 AM
(some problems solve themselves…)
 
 
3 hours later…
12:15 PM
What should we do with this question
0
Q: In SSL and TLS, why is there a separate Change Cipher Spec Protocol rather than including a change_cipher_spec message in the Handshake Protocol?

ubhusriIn SSL and TLS, why is there a separate Change Cipher Spec Protocol rather than including a change_cipher_spec message in the Handshake Protocol?

We could migrate to Security.SE, in which case they would close it as a duplicate of this question:
8
A: Why is change cipher spec an independent protocol content type and not part of Handshake Messages?

Thomas PorninSSL uses messages which are encoded over records. Encryption is done on a per record basis. However, several messages of the same type (e.g. handshake messages) can be crammed together in the same record. Since the Change Cipher Spec message modifies encryption settings, a new record should begin...

Or, we could answer it here. I may just copy and paste Thomas's answer as a quote, link to the original, and make it community wiki if we keep it here.
 

« first day (1482 days earlier)