Re: [TLS] ServerHello extensions

2018-01-18 Thread R du Toit
https://github.com/tlswg/tls13-spec/pull/1143 From: Eric Rescorla Date: Thursday, January 18, 2018 at 1:25 PM To: R du Toit Cc: "tls@ietf.org" Subject: Re: [TLS] ServerHello extensions Thanks. These are good points. I would welcome a PR.

Re: [TLS] ServerHello extensions

2018-01-18 Thread Eric Rescorla
Thanks. These are good points. I would welcome a PR. On Thu, Jan 18, 2018 at 10:21 AM, R du Toit wrote: > Issue#1: Section "4.1.3 Server Hello" currently states: > > *extensions A list of extensions. The ServerHello MUST only include > extensions which are required to establish

Re: [TLS] ServerHello extensions

2018-01-18 Thread Benjamin Kaduk
On 01/18/2018 12:21 PM, R du Toit wrote: > I can add a PR for both issues, if you agree. Please do. -Ben ___ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls

[TLS] ServerHello extensions

2018-01-18 Thread R du Toit
Issue#1: Section "4.1.3 Server Hello" currently states: extensions   A list of extensions. The ServerHello MUST only include extensions which are required to establish the cryptographic context. Currently the only such extensions are “key_share” and “pre_shared_key”. All current TLS 1.3

Re: [TLS] signature_algorithms_cert extension

2018-01-18 Thread Eric Rescorla
On Thu, Jan 18, 2018 at 3:29 AM, Matt Caswell wrote: > The specification of the new signature_algorithms_cert seems somewhat > lacking to me. There is very little description about how it should be > interpreted. About the best I can get from the spec is this: > >The

[TLS] signature_algorithms_cert extension

2018-01-18 Thread Matt Caswell
The specification of the new signature_algorithms_cert seems somewhat lacking to me. There is very little description about how it should be interpreted. About the best I can get from the spec is this: The "signature_algorithms_cert" extension applies to signatures in certificates and the