Looking at the references, I found RFC 7366, by Peter Gutmann (author of the dual-licensed cryptlib), which proposes an extension to make TLS encrypt-then-MAC i

Looking at the references, I found RFC 7366, by Peter Gutmann (author of the dual-licensed cryptlib), which proposes an extension to make TLS encrypt-then-MAC instead of MAC-then-encrypt. Interestingly, that RFC cites three informational references, two of which predate TLS 1.1 (2002).