X-Git-Url: https://git.saurik.com/apple/security.git/blobdiff_plain/427c49bcad63d042b29ada2ac27e3dfc4845c779..e3d3b979fd185d8303f28a937baa53a187fb8c7d:/libsecurity_ssl/lib/SecureTransport.h

diff --git a/libsecurity_ssl/lib/SecureTransport.h b/libsecurity_ssl/lib/SecureTransport.h
index 856d7f14..e0a5cf48 100644
--- a/libsecurity_ssl/lib/SecureTransport.h
+++ b/libsecurity_ssl/lib/SecureTransport.h
@@ -130,6 +130,11 @@ typedef enum {
      * using a block cipher.
      */
     kSSLSessionOptionSendOneByteRecord,
+    /*
+     * Allow/Disallow server identity change on renegotiation. Disallow by default
+     * to avoid Triple Handshake attack.
+     */
+    kSSLSessionOptionAllowServerIdentityChange,
 
 } SSLSessionOption;