Re: [TLS] draft-tls-tls13 - comments on section 4.8.1 Digital Signature

2016-05-30 Thread Daniel Migault
Thanks a lot for your responses, they addressed my concerns. BR, Daniel On Fri, May 27, 2016 at 5:58 PM, Eric Rescorla wrote: > > > On Fri, May 27, 2016 at 1:17 PM, Daniel Migault < > daniel.miga...@ericsson.com> wrote: > >> Hi, >> >> I have a few comments while reading 4.8.1 Digital Signature o

Re: [TLS] draft-tls-tls13 - comments on section 4.8.1 Digital Signature

2016-05-27 Thread Eric Rescorla
On Fri, May 27, 2016 at 1:17 PM, Daniel Migault wrote: > Hi, > > I have a few comments while reading 4.8.1 Digital Signature of > draft-tls-tls13.Hope it helps. > > BR, > Daniel > > Comment a) > "In previous versions of TLS, the ServerKeyExchange format meant that > attackers can obtain a signatu