[TLS] Antwort: Re: Verifying X.509 Certificate Chains out of order

[Axel.Heider at gi-de.com]

Peter,

> Again, how can you create an implementation that can run the entire SSL
> protocol but can't manage a few 32-bit pointers across three or four 
certs?
> This seems like a total red herring, it's difficult to think of an
> implementation that can perform the necessary cert verification but 
somehow
> can't manage an extra pointer swap.

It's not the pointers, but the certificates that need to be stored 
temporary, too. If you sum all this little things that could be 
allowed at the cost of just some more memory, using TLS for low end 
devices becomes harder and harder - and less interesting despite it
beeing a well known standard that people really trust in.


regards,
Axel Heider
_______________________________________________
TLS mailing list
TLS at ietf.org
https://www.ietf.org/mailman/listinfo/tls