Authentication Gap in TLS Renegotiation
extendedsubset.com