I noticed that the "dnssec_chain" extension in the IANA registry lists only "CH" in the "TLS 1.3" column. However, the extension sends its response in the certificate message (section 2.2), so I think that column should read "CH, CT".
-Ilari _______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls