Spec freeze

[marc]

> Since no one voiced an objection to my proposal of November 7th perhaps
> it could still be considered for inclusion?
> 
> Something in section 1.1 or 4 to communicate that servers should/must
> send a TLS close_notify message before closing the TCP connection.

FWIW I support that proposal. And if it can't be included in the spec, at
least include it in the best practices document.

Why use TLS at all, if we are fine with chance or a bad guy
truncating a message ? Either use TLS properly or don't use
it at all.

regards

marc