How about removing the RSA/ECDSA from the cipher suite, and making the SigAlgs extension mandatory for connections requiring authentication? That halves the number of cipher suites and eliminates an unnecessary redundancy, while keeping the rest of the cipher suite negotiation logic intact.
Kyle _______________________________________________ TLS mailing list [email protected] https://www.ietf.org/mailman/listinfo/tls
