Re: [TLS] [lamps] [EXTERNAL] Re: Q: Creating CSR for encryption-only cert?

2022-10-06 Thread John Gray
trip. There doesn’t seem to be an ideal solution. I tried to think about whether using a KEM POP would be any better, but so far have concluded that it would have the same issues. Cheers, John Gray From: Spasm On Behalf Of Mike Ounsworth Sent: Thursday, October 6, 2022 12:05 PM To: Thom

Re: [TLS] [lamps] [EXTERNAL] Re: Q: Creating CSR for encryption-only cert?

2022-10-07 Thread John Gray
-Original Message- From: Peter Gutmann Sent: Friday, October 7, 2022 1:31 PM To: von Oheimb, David ; Mike.Ounsworth=40entrust@dmarc.ietf.org; John Gray ; tim.holleb...@digicert.com; tomas.gustavs...@keyfactor.com Cc: morgan...@dataio.com; sp...@ietf.org; tls@ietf.org Subject: Re

Re: [TLS] [lamps] [EXTERNAL] Re: Q: Creating CSR for encryption-only cert?

2022-10-07 Thread John Gray
10 on top of sushi rice, I won't > buy it. A PKCS#10 on a pile of collapsing sushi rice... Hmmm.Maybe I'll ask my daughter to draw a picture for me, or we can ask one of those AI art things to do it for us... 😊 -John Gray Any email and files/attachments transmitted with it are

Re: [TLS] [lamps] [EXTERNAL] Re: Q: Creating CSR for encryption-only cert?

2022-10-07 Thread John Gray
John Gray writes: >You can replay the CSR and get the certificate request by the original >party signed by whatever CA you want, but would that do you any good if >you don't have the private key? >That's exactly the point, which others have also made in the thread.