tree 8d58745d31a798a6acd861bd548e11587125f8cd
parent 509e5ed20146121177fe3649fe4f51dbc91e60c3
author Adam Langley <agl@chromium.org> 1403290800 -0700
committer Adam Langley <agl@chromium.org> 1403295455 -0700

CBC record splitting.

This patch removes support for empty records (which is almost
universally disabled via SSL_OP_ALL) and adds optional support for 1/n-1
record splitting.

The latter is not enabled by default, since it's not typically used on
servers, but it should be enabled in web browsers since there are known
attacks in that case (see BEAST).