2 ms·
Is it coming? I notice that OpenSSL now has support for raw public keys. The spec (RFC 7250, "Using Raw Public Keys in Transport Layer Security (TLS) and Datag
by zwp 2y ago
Is it coming? I notice that OpenSSL now has support for raw public keys.
The spec (RFC 7250, "Using Raw Public Keys in Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)") suggests DANE/DNSSEC as a mechanism to bind identities to public keys (section 6).
https://datatracker.ietf.org/doc/html/rfc7250 https://datatracker.ietf.org/doc/html/rfc7250
Will this really be simpler?
- vlovich123 2y agoSimpler and faster I hope.
- tptacek 2y agoIn fact, the slowness and complexity of DANE is a big part of why it got pulled.
- tptacek 2y agoIt is not coming. Browsers are unlikely to support DANE (Chrome briefly did, and then pulled support, IIRC).