Re: [TLS] Consensus call for certificate URL extension

[Eric Rescorla <ekr at networkresonance.com>]

At Mon, 22 Sep 2008 21:52:59 -0700,
Joseph Salowey (jsalowey) wrote:
> 
> We need to close this open issue.  I think there are two basic options
> that address the security issues that have been raised:
> 
> A) Deprecate the current extension and create a similar new extension
> with the hash mandatory.
> 
> B) Make the hash mandatory in the current extension.  This should not
> cause deployment problems because there are no known deployments that
> make the hash optional.

(B)

-Ekr
_______________________________________________
TLS mailing list
TLS at ietf.org
https://www.ietf.org/mailman/listinfo/tls