Re: [TLS] Certificate keyUsage enforcement question (new in RFC8446 Appendix E.8)

Fri, 09 Nov 2018 09:25:55 -0800 


> On Nov 9, 2018, at 11:52 AM, Yoav Nir <[email protected]> wrote:
> 
>> Nor have I, and I rather think that introducing fixed-(EC)DH ciphers into
>> TLS was a mistake, and glad to see them gone in TLS 1.3.
> 
> FWIW RFC 8422 also deprecates them for TLS 1.2 and earlier.

Great!  Thanks.  I see that in:

   5.5.  Certificate Request

   https://tools.ietf.org/html/rfc8422#section-5.5

Mind you, as that text is in the context of "Certificate Request" some
might not read to understand that they're also deprecated for the server
certificate, but we can hope that'll be understood implicitly.

-- 
        Viktor.

_______________________________________________
TLS mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/tls























					Reply via email to