SEC17 — Security: SSL reference no longer valid

Summary: This is an issue vs the Security specification.

The reference to SSL,

ftp://ierf.cnsi.reston.va.us/internet-drafts/draft-freier-ssl-version3-
01.txt

is not valid even if you correct the domain from "ierf" to "ietf". In
fact, the Internet Draft (which was only valid for six months) has been
withdrawn and I was unable to find a copy anywhere on the web.

Possible solutions:

If someone has a copy, and copyright permissions allow, we can post it
on the OMG server and reference it even though it"s not a valid IETF
specification.

Otherwise, the spec should be updated to conform to TLS 1.0 and the
reference updated to this spec instead of the SSL draft.

In the future, IETF drafts (which have limited lifetime) should not be
normative refereces in any OMG specifications.

close issue 2789