Hi Ilari,

If you're looking for a currently live server www.facebook.com will serve
you a Delegated Credential if you indicate support for it in your
ClientHello.

If you want other implementations to test against, Cloudflare's fork of Go
<https://github.com/cloudflare/go/blob/cf/src/crypto/tls/delegated_credentials.go>
has an implementation, and with some finagleing you can make boringssl
support DCs too.

Regards,

Jonathan

On Mon, 17 Jul 2023 at 07:46, Ilari Liusvaara <ilariliusva...@welho.com>
wrote:

> On Thu, Jul 13, 2023 at 03:29:20PM -0700, rfc-edi...@rfc-editor.org wrote:
> > A new Request for Comments is now available in online RFC libraries.
> >
> >         RFC 9345
> >
> >         Title:      Delegated Credentials for TLS and DTLS
> >         Author:     R. Barnes,
> >                     S. Iyengar,
> >                     N. Sullivan,
> >                     E. Rescorla
> >         Status:     Standards Track
> >         Stream:     IETF
> >         Date:       July 2023
> >         Mailbox:    r...@ipv.sx,
> >                     sub...@fb.com,
> >                     n...@cloudflare.com,
> >                     e...@rtfm.com
> >         Pages:      17
> >         Updates/Obsoletes/SeeAlso:   None
> >
> >         I-D Tag:    draft-ietf-tls-subcerts-15.txt
> >
> >         URL:        https://www.rfc-editor.org/info/rfc9345
> >
> >         DOI:        10.17487/RFC9345
>
> Are there any known servers that support this (for quick interop check)?
> All the test servers I have found (three) seem to have been shut down.
>
>
>
>
> -Ilari
>
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls
>
_______________________________________________
TLS mailing list
TLS@ietf.org
https://www.ietf.org/mailman/listinfo/tls

Reply via email to