Re: [MMUSIC] WGLC on draft-ietf-mmusic-dtls-sdp-06.txt

[Roman Shpount <[e-mail]>]

On Wed, Feb 24, 2016 at 4:12 PM, Paul Kyzivat <[e-mail]> wrote:

>
> But rfc4572 says:
>
>    A certificate fingerprint MUST be computed using the same one-way
>    hash function as is used in the certificate's signature algorithm.
>    (This ensures that the security properties required for the
>    certificate also apply for the fingerprint.  It also guarantees that
>    the fingerprint will be usable by the other endpoint, so long as the
>    certificate itself is.)
>
> That seems to exclude creating fingerprints with multiple algorithms, or
> any need to do so.
>
> Looking deeper, I find OLD TEXT (from 7345) that talks about multiple
> fingerprints, for differing cipher suites. So I guess in that case multiple
> certificates will also be presented, with a fingerprint for each, and it is
> only necessary to verify one of them.
>
> But the NEW TEXT removes all of this, changing it to refer to *this*
> draft. But equivalent text isn't present in this draft!!!
>

I was talking about using multiple fingerprints to offer multiple cipher
suites. I am not sure what draft this is present in, but this is what EKR
explained to me in on the list.

Can you send the reference to this OLD TEXT you mentioned so that it can be
added to this draft?

Thank You,
_____________
Roman Shpount