As discussed in issue #760 and Seoul, I've prepared a PR that moves most all of CertificateRequest into extensions:
https://github.com/tlswg/tls13-spec/pull/791 This got a little more complicated than I anticipated because I had to actually define a certificate_authorities extension and I decided to give it some semantics when the client sent it (displacing trusted_ca_keys, which seems unused and kinda busted). Target merge date: Friday. -Ekr
_______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls
