3 ms·
The way forward will probably be to switch to ECDSA anyway, just like Cloudflare "Universal SSL".
by giovannibajo1 11y ago
The way forward will probably be to switch to ECDSA anyway, just like Cloudflare "Universal SSL".
- nailer 11y agoYeah (author here) I'd like to do a followup with ECC. There's a few cloud providers who only take RSA keys but ECC is otherwise fairly well supported these days. I'll also amend the openssl / certreq commands CertSimple generate to provide an ECC option.
- wolf550e 11y agoBy the time time people switch to ECDSA, they should switch to Ed25519 or Ed448, maybe with ECDSA fallback (with web server and TLS library support for multiple keys for same domain, depending on ClientHello).
- rsy96 11y agoHave Ed25519 or Ed448 been standardized into TLS? I've never seen a website with that before.
- dchest 11y agoThey will be: https://tools.ietf.org/html/draft-ietf-tls-curve25519-01 https://tools.ietf.org/html/draft-ietf-tls-curve25519-01
- wolf550e 11y agoSo far, that's only key exchange, not signatures [1]. CFRG is still debating a signature method [2]. 1 - https://tools.ietf.org/html/draft-irtf-cfrg-curves-07 https://tools.ietf.org/html/draft-irtf-cfrg-curves-07 2 - https://www.ietf.org/mail-archive/web/cfrg/current/msg07291.html https://www.ietf.org/mail-archive/web/cfrg/current/msg07291....
- dchest 11y agoAh, true. Hopefully, they will use the same curves, with EdDSA.