|
Hi Ilari,
Thank you for pointing this out. I have not been following PLANTS as closely as I should have.
The AP (server, in this case) must be able to determine which certificate/MTC and corresponding private key to use when generating CertificateVerify. Therefore, the information needed to act within its commitment must be available to the AP, even if it is not explicit within the MTC.
Similarly, the MTC is received by the RP (client, in this case) along with a CertificateVerify that clarifies the nature of the authentication. So the RP can determine if the server is acting within its commitment.
Thanks, Yaron
On 09/06/2026 19:55, Ilari Liusvaara
wrote:
On Tue, Jun 09, 2026 at 02:09:09PM +0300, Yaron Sheffer wrote:This version addresses comments from an extensive discussion on this list, as well as our learnings from a POC implementation [1].AFAIK, Merkle Tree Certificates (PLANTS WG) do not have any indication in the certificate itself if those are post-quantum or not (nor does certificate properties from TAI have this information). This might be an issue for APs.[1] https://github.com/yaronf/pqc-continuity-poc-------- Forwarded Message -------- Subject: New Version Notification for draft-sheffer-tls-pqc-continuity-02.txt Date: Tue, 09 Jun 2026 03:40:15 -0700 From: [email protected] To: Tirumaleswar Reddy.K <[email protected]>, Tirumaleswar Reddy <[email protected]>, Yaron Sheffer <[email protected]> A new version of Internet-Draft draft-sheffer-tls-pqc-continuity-02.txt has been successfully submitted by Yaron Sheffer and posted to the IETF repository. Name: draft-sheffer-tls-pqc-continuity Revision: 02 Title: PQC Continuity: Downgrade Protection for TLS Servers Migrating to PQC Date: 2026-06-09 Group: Individual Submission Pages: 14 URL: https://www.ietf.org/archive/id/draft-sheffer-tls-pqc-continuity-02.txt Status: https://datatracker.ietf.org/doc/draft-sheffer-tls-pqc-continuity/ HTML: https://www.ietf.org/archive/id/draft-sheffer-tls-pqc-continuity-02.html HTMLized: https://datatracker.ietf.org/doc/html/draft-sheffer-tls-pqc-continuity Diff: https://author-tools.ietf.org/iddiff?url2=draft-sheffer-tls-pqc-continuity-02-Ilari _______________________________________________ TLS mailing list -- [email protected] To unsubscribe send an email to [email protected] |
_______________________________________________ TLS mailing list -- [email protected] To unsubscribe send an email to [email protected]
