I am opposed to the basic concept of injecting a third-party into the E2E TLS process.
We don’t even have a TLS 1.3 RFC yet. We have no deployments yet. We have no insight into whether or not there is an actual need for this. How can we put this on-hold for, say, two years. _______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls