All post-handshake messages must be consecutive. Fixes #930.

tlswg · Apr 3, 2017 · 01b3bd7 · 01b3bd7
1 parent 1152b94
commit 01b3bd7
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/draft-ietf-tls-tls13.md b/draft-ietf-tls-tls13.md
@@ -3432,6 +3432,8 @@ message. The client SHOULD respond with the appropriate Authentication
 messages. If the client chooses to authenticate, it MUST send
 Certificate, CertificateVerify, and Finished. If it declines, it
 MUST send a Certificate message containing no certificates followed by Finished.
+All of the client's messages for a given response
+MUST appear consecutively on the wire with no intervening messages of other types.
 
 Note: Because client authentication may require prompting the user,
 servers MUST be prepared for some delay, including receiving an