>SSL3 allows security parameters to be negotiated
>dynamically. All thats required is the support
>for SSL3 framing and session initialization.
>We're not absolutely requiring all of the
>cipher suites and authentication
>mechanisms the SSL3 spec includes.
I'm always concerned when I see the phrase "all
"that's required is ..."
=