[TLS] CertificateRequest in TLS 1.2

[Mike <mike-list at pobox.com>]

In TLS 1.2, a CertificateRequest message has a list
of HashTypes specifying the acceptable hashes used
in certificate signatures.  There is no guidance
on the ordering of these values.  I would suggest
that the server should specify them in the order
that it prefers.  The client would scan the list
in order, and return a certificate using the first
matching hash algorithm.

Mike

_______________________________________________
TLS mailing list
TLS at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls