Re: [TLS] PR to clarify RSASSA-PSS requirements

2017-11-28 Thread Peter Wu
Hi Eric and list, I have updated the PR https://github.com/tlswg/tls13-spec/pull/1098 last week based on received feedback. Two issues are however still open: - Should a different codepoint be used for SPKIs other than rsaEncryption (i.e. id-RSASSA-PSS)? If so, what codepoints? - Should cer

Re: [TLS] PR to clarify RSASSA-PSS requirements

2017-11-22 Thread Ilari Liusvaara
On Wed, Nov 22, 2017 at 09:42:04AM +0100, Nikos Mavrogiannopoulos wrote: > On Wed, 2017-11-22 at 03:54 +, Peter Wu wrote: > > Hi, > > > > At the moment there is still ambiguity in the requirements for PSS > > with > > relation to certificates. Proposal to clarify this: > > https://github.com/t

Re: [TLS] PR to clarify RSASSA-PSS requirements

2017-11-22 Thread Hubert Kario
On Wednesday, 22 November 2017 13:15:58 CET Peter Wu wrote: > Hi Nikos, > > On Wed, Nov 22, 2017 at 09:42:04AM +0100, Nikos Mavrogiannopoulos wrote: > > On Wed, 2017-11-22 at 03:54 +, Peter Wu wrote: > > > Hi, > > > > > > At the moment there is still ambiguity in the requirements for PSS > >

Re: [TLS] PR to clarify RSASSA-PSS requirements

2017-11-22 Thread Nikos Mavrogiannopoulos
On Wed, 2017-11-22 at 12:15 +, Peter Wu wrote: > Hi Nikos, > > On Wed, Nov 22, 2017 at 09:42:04AM +0100, Nikos Mavrogiannopoulos > wrote: > > On Wed, 2017-11-22 at 03:54 +, Peter Wu wrote: > > > Hi, > > > > > > At the moment there is still ambiguity in the requirements for > > > PSS > > >

Re: [TLS] PR to clarify RSASSA-PSS requirements

2017-11-22 Thread Peter Wu
Hi Nikos, On Wed, Nov 22, 2017 at 09:42:04AM +0100, Nikos Mavrogiannopoulos wrote: > On Wed, 2017-11-22 at 03:54 +, Peter Wu wrote: > > Hi, > > > > At the moment there is still ambiguity in the requirements for PSS > > with > > relation to certificates. Proposal to clarify this: > > https://g

Re: [TLS] PR to clarify RSASSA-PSS requirements

2017-11-22 Thread Peter Wu
On Tue, Nov 21, 2017 at 08:37:45PM -0800, Eric Rescorla wrote: > I don't think that this is the right answer. > > Let's separate out the question of (a) what people need to support and (b) > what the code points mean. (b) needs to be unambigous, as that's the point > of the extension and this PR a

Re: [TLS] PR to clarify RSASSA-PSS requirements

2017-11-22 Thread Nikos Mavrogiannopoulos
On Wed, 2017-11-22 at 03:54 +, Peter Wu wrote: > Hi, > > At the moment there is still ambiguity in the requirements for PSS > with > relation to certificates. Proposal to clarify this: > https://github.com/tlswg/tls13-spec/pull/1098 > > > This PR intends to clarify the requirements for PSS s

Re: [TLS] PR to clarify RSASSA-PSS requirements

2017-11-21 Thread Eric Rescorla
I don't think that this is the right answer. Let's separate out the question of (a) what people need to support and (b) what the code points mean. (b) needs to be unambigous, as that's the point of the extension and this PR actually makes it explicitly unambigous. With that said, there seem to be

[TLS] PR to clarify RSASSA-PSS requirements

2017-11-21 Thread Peter Wu
Hi, At the moment there is still ambiguity in the requirements for PSS with relation to certificates. Proposal to clarify this: https://github.com/tlswg/tls13-spec/pull/1098 This PR intends to clarify the requirements for PSS support. The requirements are intentionally minimal to reduce impleme