IETF Logo Mail Archive

[lamps] Re: [TLS] Re: Re: TLS Client Certificates; a survey

Phillip Hallam-Baker <phill@hallambaker.com> Wed, 01 April 2026 12:50 UTC

Return-Path: <hallam@gmail.com>
X-Original-To: spasm@mail2.ietf.org
Delivered-To: spasm@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id D8758D4C40B2 for <spasm@mail2.ietf.org>; Wed, 1 Apr 2026 05:50:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1775047850; bh=Ohe+BKb+Bj+jCnWBJYhrjOEWAnrHFH8ufkGpAsBIM44=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=YRKFwFtO58nwxwNzrprdMmHcSAiVzMClLz7v6A60jw0M7MtQ++Ggqb13yVs+pqvD+ rqQZYCstJyVNgKV1ZAGD+QkXJn5j4Of9Y6laYea089aM8uzFKUkcRc7I6W+nx0Y0+w V3ge0cGDL6xgPYWXSe+FayLqvln+npX/F3k/fW4M=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.892
X-Spam-Level:
X-Spam-Status: No, score=-1.892 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FORGED_FROMDOMAIN=0.001, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ofde8OTuCMRs for <spasm@mail2.ietf.org>; Wed, 1 Apr 2026 05:50:50 -0700 (PDT)
Received: from mail-qt1-f179.google.com (mail-qt1-f179.google.com [209.85.160.179]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 8B6A8D4C40A2 for <spasm@ietf.org>; Wed, 1 Apr 2026 05:50:50 -0700 (PDT)
Received: by mail-qt1-f179.google.com with SMTP id d75a77b69052e-50d2945e6adso34077091cf.3 for <spasm@ietf.org>; Wed, 01 Apr 2026 05:50:50 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1775047844; cv=none; d=google.com; s=arc-20240605; b=SOR6ubdj5O8owaLsfgGABvcyI8pBRcFjV5Wnyv6Bq8V28DvF1gcIeINySMsVEvKv63 W0mrVcW6I17fJXFdDCxZAW+RPAll0z9trnY/ym3BW2NTlLY6E2GxehciWIGjycYKqcF1 p+lA2eDvRO/2jeM/dd+5XqorRAdRu/2LLMVmhZX0vaJyGkXAc/E/EmwfnA805eh+XhiG YLyG5XMkpzpiBOD4MA4WYYVuMXauYVj/cMwJ5l7hxEjydakbBYs6hRYv5TEmugBmZ73j 51M5jSPqV9nwW8K+ErUgS4j+8mGNvt8wFH1MndTw8t35xvjC3nBc9/7wApE+tsAd8+/n cU8g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version; bh=Ohe+BKb+Bj+jCnWBJYhrjOEWAnrHFH8ufkGpAsBIM44=; fh=zorgNQj/O4wGNnuem+Pe0gHKMkuO7+60njfvUu09/4E=; b=YG0HrCDsK0+cmkm8LryCiaZ41p2z3ab6azkrA+2f5pzt1hxJFxFhJiUiaEsWZXQLXI 2fW+Rfr5c70J9w/vgmjNy5QCb3TBlLOIbQTN2EjvmQJshtC9DHUyYf1NIR1YjDzcejeY IOcknNq9YFtOtsR1bGY8+kgQBC94JdyVn3vSL6ZlMquowGfQJClLt7VxheW7rF3En/X2 WJjFykYkXK5A8o+Uv10ZabcHx+6H7HC1I9PMGYI3wN98YPAzzG7mo87eb3hvG0CidQj1 1V3jHfFh+lMCNlDphb5RBEvMHv5J/5mOBBnYChtbqskxpGXSwJpvjeoX3EsATFP9Ph9l NCTQ==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1775047844; x=1775652644; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=Ohe+BKb+Bj+jCnWBJYhrjOEWAnrHFH8ufkGpAsBIM44=; b=XgLtZy6+pCUBO6skU5N+4si8FWT+hr2Dj7lGvtpWR03S3Nt12xD72v3/oQo54bTSbK 2s3iyBUe1IEUs4riGjg2ezbbgYFX+FDqZZ26Noc20/7H/mE3a2hKg5KskXW5IsLQFWbQ YLwc39YgUMU9btjLObP3NUYsbOPiYJAzRIkQJjPb9E4PC/DdpkJ3C4UgF0FiOKy+HL2W Da+Dtr1uv9L2lW8gIqukBFbIVBKVWtgOztosbcgr43W3ZF4tETMnHA+BJsC98l+CKw4J uJhSuLFj5S0roU84IKQLs8JIOI3veqAhszUYJgvTFfhynQmgjeVY/zdL0CW/Lw9nKWv8 wOtg==
X-Forwarded-Encrypted: i=1; AJvYcCVinupgb9+R5QCbEW2mNzM+j1XgV8vcIS1HFA6UtgCElyrKUVhoHyAJB51CztzafB8UYsOkiw==@ietf.org
X-Gm-Message-State: AOJu0YxGiZmYGNB4KneFFHe4QHTQLUgflSzLTvvrCUbXT75L+G/4J8gd Dr5CHmqbFksyDBqNQiRIWtYWbn32gwlklZqm+bJ6+vB2KZ6Js6SLSbjxb+yd0iDZqDldRe5IHUP GLgbeLI/8hzfhHXSMO5L1wDEV2zDEGrk=
X-Gm-Gg: ATEYQzyKz0pcQb4KzBc3Bqlm58jVF+rbRUts7Wfmp4f12Yprd9PXzVVAOLVKRZDMJAJ B16e30jo4ebDvBQY3mwyZjsNQxMhpOtJtpdoDAKF1Ce1r48qGBhYI9EWcK+cnpCenPJv8bZY/fX UkoI0Ox5C47lb+GVRUlbapw2kZIELookpJPMzt5stnPEMBAZ7nSGku5RjoBlYW87OOkqcZacHO7 JIwFFMSJ3uNv+u7IWNbktgHta7PQH++mfk8mUEUA8a0GA/XhGpzIxpVjKuRR/EF8Vnm/m9IJZJn Yiy5tNnmCY0LCTYbk8aYfuN678RaUxkM92zU+Ve8zdO9KdgFXVQ68bUadB1/GMU=
X-Received: by 2002:ac8:5e07:0:b0:50b:4dc9:3488 with SMTP id d75a77b69052e-50d3bccd919mr45175941cf.45.1775047843657; Wed, 01 Apr 2026 05:50:43 -0700 (PDT)
MIME-Version: 1.0
References: <MN2PR17MB40314193002D42E6ED4F465ACD4CA@MN2PR17MB4031.namprd17.prod.outlook.com> <MN2PR17MB40315028C6985BD9F4F0C886CD52A@MN2PR17MB4031.namprd17.prod.outlook.com> <acrfWoDSHUrYj1if@ubby> <CAKZgXHqKBwYqjB3SOexT1B3=P2m83esgQTV74PJtjk+LGwAhcA@mail.gmail.com> <CACf5n7-n6xj35ukPznkes8rDx9-QWi+CDntt2Z5jcM1L+uo1RQ@mail.gmail.com> <CAMm+LwiGABsBzMD4v-DrPqyAbnAT4Z0Mp6Ee_Az0BSu0G7nZEA@mail.gmail.com> <CACf5n7_60uGAU6F4qOedZL16e-8J13a7k2vLG3qkj6CtvgTofg@mail.gmail.com>
In-Reply-To: <CACf5n7_60uGAU6F4qOedZL16e-8J13a7k2vLG3qkj6CtvgTofg@mail.gmail.com>
From: Phillip Hallam-Baker <phill@hallambaker.com>
Date: Wed, 01 Apr 2026 08:50:31 -0400
X-Gm-Features: AQROBzBCck5UckKh-MQU1fa-Si2tUpkUfVKJNS170-en-DFKrNjUGtP3aYNiEJA
Message-ID: <CAMm+Lwiwp4PzPGG7WjL5CK+Ypv2aaaHn8x7rmHbZhNBb04+vhA@mail.gmail.com>
To: David Adrian <davadria@umich.edu>
Content-Type: multipart/alternative; boundary="0000000000002e39dc064e65881a"
Message-ID-Hash: GKVVU3TTGSBHFX4R634UYTPJ2TKK5AAD
X-Message-ID-Hash: GKVVU3TTGSBHFX4R634UYTPJ2TKK5AAD
X-MailFrom: hallam@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-spasm.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Mike Ounsworth <ounsworth+ietf@gmail.com>, Nico Williams <nico@cryptonector.com>, David Benjamin <davidben@chromium.org>, "Salz, Rich" <rsalz=40akamai.com@dmarc.ietf.org>, Tls <tls@ietf.org>, "spasm@ietf.org" <spasm@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [lamps] Re: [TLS] Re: Re: TLS Client Certificates; a survey
List-Id: This is the mail list for the LAMPS Working Group <spasm.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/Dl_JSqAK80dUKs9y_3Na7goHxEg>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Owner: <mailto:spasm-owner@ietf.org>
List-Post: <mailto:spasm@ietf.org>
List-Subscribe: <mailto:spasm-join@ietf.org>
List-Unsubscribe: <mailto:spasm-leave@ietf.org>

On Tue, Mar 31, 2026 at 11:40 PM David Adrian <davadria@umich.edu> wrote:

> > I would have rather more sympathy for the position of the browser
> providers in 2018 if they had not been so intractably opposed to adding
> support for SHA-2 back when I was pushing for that in 2002.
>
> I'll be sure to let my 4th grade self know that the Chrome Root Program
> made a bad decision in 2002, six years before Chrome was released.
>

The issue was brought up many times between 2002 and the point where we
suddenly received an edict.

My general point here is that your company is in the habit of treating the
rest of the industry as something to be ignored until you decide something
must happen in which case you make unilateral demands and rely on your
monopoly status to enforce them.

v2.46.0 | Report a Bug | By Email | System Status