[Servercert-wg] Ed25519 certificates

Q Misell q at as207960.net
Sat Jun 8 10:38:21 UTC 2024


Hi all,

At the Tor meeting a few weeks ago I had some discussions with people
asking why Ed25519 certificates are not allowed under the BR (§ 6.1.5). As
far as I can tell there isn't much of a reason not to allow Ed25519 certs
(if a CA wishes to support them ofc) and there were a few scenarios
presented to me where Ed25519 certs would be useful in the context of Tor,
which already makes heavy usage of Ed25519 keys.

Would there be motivation to change the rules to allow Ed25519 certs, or is
there some reason I'm missing as to why they're not allowed?

Thanks,
Q Misell
------------------------------

Any statements contained in this email are personal to the author and are
not necessarily the statements of the company unless specifically stated.
AS207960 Cyfyngedig, having a registered office at 13 Pen-y-lan Terrace,
Caerdydd, Cymru, CF23 9EU, trading as Glauca Digital, is a company
registered in Wales under № 12417574
<https://find-and-update.company-information.service.gov.uk/company/12417574>,
LEI 875500FXNCJPAPF3PD10. ICO register №: ZA782876
<https://ico.org.uk/ESDWebPages/Entry/ZA782876>. UK VAT №: GB378323867. EU
VAT №: EU372013983. Turkish VAT №: 0861333524. South Korean VAT №:
522-80-03080. AS207960 Ewrop OÜ, having a registered office at Lääne-Viru
maakond, Tapa vald, Porkuni küla, Lossi tn 1, 46001, trading as Glauca
Digital, is a company registered in Estonia under № 16755226. Estonian VAT
№: EE102625532. Glauca Digital and the Glauca logo are registered
trademarks in the UK, under № UK00003718474 and № UK00003718468,
respectively.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20240608/cdc0d101/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4640 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20240608/cdc0d101/attachment.p7s>


More information about the Servercert-wg mailing list