 |
 |
 |
 |
|
 |
|
 |
|
 |
|
 |
|
|
|
|
|
|
|
|
|
|
|
|
Remember that the signature over
the client's certificate and CertificateVerify is for the client's benefit, not the servers, and vice versa....
I thought that the signature over the client's certificate was to prove to the server that you have the corresponding private key, and therefore that you are the entity named in the certificate (and deserve access to private information about that entity).
Oops, I meant signature in CertificateVerify.
Mike
_______________________________________________ TLS mailing list TLS at lists.ietf.org https://www1.ietf.org/mailman/listinfo/tls