6 ms·
I doubt e.g. OpenSSH would ever implement something like you describe though. They're seemingly very much against anything x509/WebPKI.
by Avamander 4y ago
I doubt e.g. OpenSSH would ever implement something like you describe though. They're seemingly very much against anything x509/WebPKI.
- ilc 4y agoYou imply OpenSSH is the place to do this work. Given the protocol changes needed, it may be a new implementation. I actually expect it would be.
- mvkg 4y agoI believe section 7 of RFC 9000 would allow for the creation of a handshake protocol which could conform to SSH without the need for including x509.
- tankenmate 4y agoThanks for the tip, wasn't aware of this.