4 ms·
IETF standards matter to IETF protocols, which will then choose from what the IETF has already standardized because trying to push your own RFC through is hard
by rdpintqogeogsaa 5y ago
IETF standards matter to IETF protocols, which will then choose from what the IETF has already standardized because trying to push your own RFC through is hard enough as-is; you don't really want to get into a kerfluffle with the CFRG at the same time.
- tptacek 5y agoTLS and JWT are both "IETF protocols", but the IETF police won't arrest if you if you slot XChaCha20 into either of them. This is actually how it's supposed to work: RFCs are meant, at least somewhat routinely, to trail implementations. "Loose consensus and working code" used to be the motto. Get XChaCha20 deployed, and then let the IETF standardize it because they have to. That's what happened with Curve25519.