[Servercert-wg] Ed25519 in certificates

[Tim Hollebeek]

What do people think about a ballot allowing certificates based on Ed25519?
It's widely supported, more efficient, and more resistant to side channel
attacks.  It's supported by Boring SSL and OpenSSL, as well as other popular
crypto libraries.  It's been standardized at IETF (RFC 8032), and TLS 1.3
(RFC 8446) not only supports it, but encourages its use.  Some customers
prefer non-NIST curves for various reasons.  It's already widely used for
DNSSEC . the Web PKI is falling behind, as usual.

 

-Tim

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20190625/b103c0c1/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4940 bytes
Desc: not available
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20190625/b103c0c1/attachment.p7s>