A similar question for the client side: are there any Web browsers with 
Delegated Credentials support?

Cheers,

Andrei

From: TLS <tls-boun...@ietf.org> On Behalf Of Jonathan Hoyland
Sent: Monday, July 17, 2023 4:39 AM
To: Ilari Liusvaara <ilariliusva...@welho.com>
Cc: tls@ietf.org
Subject: [EXTERNAL] Re: [TLS] RFC 9345 on Delegated Credentials for TLS and DTLS

Hi Ilari,

If you're looking for a currently live server 
www.facebook.com<http://www.facebook.com/> will serve you a Delegated 
Credential if you indicate support for it in your ClientHello.

If you want other implementations to test against, Cloudflare's fork of 
Go<https://github.com/cloudflare/go/blob/cf/src/crypto/tls/delegated_credentials.go>
 has an implementation, and with some finagleing you can make boringssl support 
DCs too.

Regards,

Jonathan

On Mon, 17 Jul 2023 at 07:46, Ilari Liusvaara 
<ilariliusva...@welho.com<mailto:ilariliusva...@welho.com>> wrote:
On Thu, Jul 13, 2023 at 03:29:20PM -0700, 
rfc-edi...@rfc-editor.org<mailto:rfc-edi...@rfc-editor.org> wrote:
> A new Request for Comments is now available in online RFC libraries.
>
>         RFC 9345
>
>         Title:      Delegated Credentials for TLS and DTLS
>         Author:     R. Barnes,
>                     S. Iyengar,
>                     N. Sullivan,
>                     E. Rescorla
>         Status:     Standards Track
>         Stream:     IETF
>         Date:       July 2023
>         Mailbox:    r...@ipv.sx<mailto:r...@ipv.sx>,
>                     sub...@fb.com<mailto:sub...@fb.com>,
>                     n...@cloudflare.com<mailto:n...@cloudflare.com>,
>                     e...@rtfm.com<mailto:e...@rtfm.com>
>         Pages:      17
>         Updates/Obsoletes/SeeAlso:   None
>
>         I-D Tag:    draft-ietf-tls-subcerts-15.txt
>
>         URL:        https://www.rfc-editor.org/info/rfc9345
>
>         DOI:        10.17487/RFC9345

Are there any known servers that support this (for quick interop check)?
All the test servers I have found (three) seem to have been shut down.




-Ilari

_______________________________________________
TLS mailing list
TLS@ietf.org<mailto:TLS@ietf.org>
https://www.ietf.org/mailman/listinfo/tls
_______________________________________________
TLS mailing list
TLS@ietf.org
https://www.ietf.org/mailman/listinfo/tls

Reply via email to