Re: [TLS] Consensus call for certificate URL extension

[Nikos Mavrogiannopoulos <nmav at gnutls.org>]

Joseph Salowey (jsalowey) wrote:
> We need to close this open issue.  I think there are two basic options
> that address the security issues that have been raised:
> 
> A) Deprecate the current extension and create a similar new extension
> with the hash mandatory.
> 
> B) Make the hash mandatory in the current extension.  This should not
> cause deployment problems because there are no known deployments that
> make the hash optional.

My preference is (B).

_______________________________________________
TLS mailing list
TLS at ietf.org
https://www.ietf.org/mailman/listinfo/tls