Carsten Bormann <[email protected]> wrote:
    > On 19. Mar 2025, at 08:23, Michael Richardson <[email protected]> 
wrote:
    >>
    >> I'm complaining that #2 will get in the way of making #3 real.

    > Ah, the transition dilemma.
    > Offer a transition aid and users will become addicted to it.

Yes, this is the concern.

    > I think the upside of #2 way, way, outweighs this.

Is the upside that a device can avoid doing any ASN.1/DER parsing, since it
never has to turn the CBOR back into DER to check the signature.
But is that even true?  If a certificate has something we do not compress, or
deep in the structure, then the ASN.1 will still be there, right?  I guess we
can avoid ever creating such things for #2 (native signed).

--
Michael Richardson <[email protected]>, Sandelman Software Works
 -= IPv6 IoT consulting =-                      *I*LIKE*TRAINS*



Attachment: signature.asc
Description: PGP signature

_______________________________________________
COSE mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to