> We were happy to use the TLS functionality as documented up to their
> last draft but one, but in the final version that was passed by the
> IESG they suddenly introduced some new mandatory stuff, for which we
> have so far seen little or no rationale or explanation.
The mandatory stuff (section 9 of the TLS document) was added by
the TLS WG after explicit instructions from the Security AD, with
explicit backing from the plenary at the Munich IETF.
It was added in order to satisfy the requirements for interoperability
and avoidance of IPR issues that are common to all IETF protocols.
I don't know of any other last-minute changes, but this particular
section of the TLS spec should hardly come as a surprise to anyone;
it was the subject of great debate over the last 6 months.
Was this the only change you had problems with?
Harald A