All, During the WG call for adoption, a couple of questions were raised about comparison/analysis of sub-certs versus proxy and/or short-lived certificates. There is some discussion currently in the draft, but the chairs feel that these issues need further discussion (and elaboration in the draft) prior to WG adoption. So let’s keep the conversation going.
J&S > On Apr 12, 2017, at 15:31, Sean Turner <s...@sn3rd.com> wrote: > > All, > > At our IETF 98 session, there was support in the room to adopt > draft-rescorla-tls-subcerts [0]. We need to confirm this support on the list > so please let the list know whether you support adoption of the draft and are > willing to review/comment on the draft before 20170429. If you object to its > adoption, please let us know why. > > Clearly, the WG is going to need to work through the trade-offs between > short-lived certificates and sub-certs because both seem, to some, to be > addressing the same problem. > > Cheers, > > J&S > > [0] https://datatracker.ietf.org/doc/html/draft-rescorla-tls-subcerts _______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls
