Re: Application data during key re-exchange

[Markus Friedl <markus%openbsd.org@localhost>]

On Tue, Mar 12, 2002 at 08:56:46AM -0700, Joseph Galbraith wrote:
> Our interpretation is between KEXINIT and NEWKEYS
> nothing is allowed.  So after sending a KEXINIT
> packet, an implementation (client or server)
> must not send any non-key-exchange packets
> other than DEBUG, DISCONNECT, and IGNORE until
> it has sent a NEWKEYS packet.

Yes, this is what OpenSSH does (or tries).