4 ms·

By the time time people switch to ECDSA, they should switch to Ed25519 or Ed448, maybe with ECDSA fallback (with web server and TLS library support for multiple

By the time time people switch to ECDSA, they should switch to Ed25519 or Ed448, maybe with ECDSA fallback (with web server and TLS library support for multiple keys for same domain, depending on ClientHello).

rsy96 11y ago
Have Ed25519 or Ed448 been standardized into TLS? I've never seen a website with that before.
- dchest 11y ago
  They will be: https://tools.ietf.org/html/draft-ietf-tls-curve25519-01 https://tools.ietf.org/html/draft-ietf-tls-curve25519-01
  - wolf550e 11y ago
    So far, that's only key exchange, not signatures [1]. CFRG is still debating a signature method [2]. 1 - https://tools.ietf.org/html/draft-irtf-cfrg-curves-07 https://tools.ietf.org/html/draft-irtf-cfrg-curves-07 2 - https://www.ietf.org/mail-archive/web/cfrg/current/msg07291.html https://www.ietf.org/mail-archive/web/cfrg/current/msg07291....
    - dchest 11y ago
      Ah, true. Hopefully, they will use the same curves, with EdDSA.