On Thu, Apr 05, 2018 at 12:07:57PM +1000, Martin Thomson wrote: > Given what we've learned about pinning (it is being removed from > browsers), this seems like a bad plan to me.
You can use this TTL, or not. You're not required to set it to any value other than the max ("infinity") or min (zero) if you don't want to. You can pin or not pin. You can make DNAE mandatory (TTL set to infinity) or not. Adding this TTL cannot have a negative impact on the initial application of this extension. Nico -- _______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls