Archive

> WebPKI doesn't want it

How can it be true that it's too early to start developing a protocol for composite keys and signatures for Web PKI when Cloudflare and Google have already finished a round of experiments with hybrid key exchanges? Maybe I'm reading too much into it, but the existence of those experiments suggested to me that the need for hybrid/composite implementations was imminent. (I understand that the draft in question concerns signatures, not key exchanges, but apparently there isn't even a draft for the latter yet.)

If not now, when? After NIST crowns a winner? I don't see why it's necessary to wait that long given that the proposed solutions are algorithm-independent. And since the standardization process takes a while, won't waiting until then mean that there won't be a standard until after it's needed?

Carrick

> On Nov 19, 2019, at 11:37 PM, Eric Rescorla <ekr@rtfm.com> wrote:
> 
> 
> 
> On Tue, Nov 19, 2019 at 11:34 PM Salz, Rich <rsalz@akamai.com <mailto:rsalz@akamai.com>> wrote:
> What I was trying to say in the meeting is that I don't think this is probably to be of much use in the WebPKI at this time.
>  
> 
> I agree with that.
> 
>  
> 
> But of course that’s not a “veto” on doing this work, which OF COURSE you are not saying.
> 
> 
> Agreed. I think the relevant question is if there is enough demand, so just because WebPKI doesn't want it doesn't mean that someone doesn't.
> 
> -Ekr
> 
> _______________________________________________
> Secdispatch mailing list
> Secdispatch@ietf.org <mailto:Secdispatch@ietf.org>
> https://www.ietf.org/mailman/listinfo/secdispatch <https://www.ietf.org/mailman/listinfo/secdispatch>
> _______________________________________________
> Secdispatch mailing list
> Secdispatch@ietf.org <mailto:Secdispatch@ietf.org>
> https://www.ietf.org/mailman/listinfo/secdispatch <https://www.ietf.org/mailman/listinfo/secdispatch>

Re: [Secdispatch] Clarification Question for the Comment from Eric Rescorla (