4 ms·
I would love to eliminate RSA from the environments I am responsible for, and replace it with something using Curve25519. However, one place I see RSA still in
by korethr 7y ago
I would love to eliminate RSA from the environments I am responsible for, and replace it with something using Curve25519. However, one place I see RSA still in use is in TLS certificates. Using Curve25519 in TLSv1.3 is great, but the use of RSA-signed certs in the beginning of setting up that TLS connection still strikes me as a weak link.
AFAICT, CA vendors don't offer cert signing in anything other than RSA at present. Is there any motion to getting Curve25519 replacing RSA in the CA cert system for TLS or code signing, or are we gonna be stuck with RSA for certs for the next decade?
- deleted 7y ago[deleted]