[lamps] Re: Questions and Comments on draft-ietf-lamps-certificate-discovery

[suzanne wibada <[e-mail]>]

Hi Russ,

Thank you very much for the clarification. I appreciate your explanation.

Best regards,

Suzanne

________________________________
De : Russ Housley <[e-mail]>
Envoyé : Wednesday, 08 July 2026 16:28:17
À : suzanne wibada <[e-mail]>
Cc : IETF LAMPS <[e-mail]>
Objet : Re: [lamps] Questions and Comments on draft-ietf-lamps-certificate-discovery

Suzanne:

1. Simultaneous use of multiple certificates/keys

The abstract mentions support for multi-key/certificate usage, but the current use cases seem to focus primarily on scenarios where one certificate acts as an alternative or backup to another.

It may be interesting to introduce a Hybrid Certificate use case, where multiple certificates are used simultaneously to authenticate the same session.

For example, during a post-quantum migration, both a classical certificate and a PQC certificate could contribute to the authentication of a connection. In a TLS context, this could potentially be achieved by introducing a second CertificateVerify message carrying an additional signature generated using the secondary certificate. In this model, both certificates would actively participate in establishing trust rather than serving merely as alternatives to one another.

We need to be careful here.  Some of this is not in scope for the LAMPS WG.  I think it would be fine for LAMPS to provide a mechanism for a relying party to discover that a subject has more than one valid certificate.  However, the use of one or more of those certificate in a security protocol needs to be handeled that the WG that specifies that security protocol.  The exception is S/MIME, as that security protocol is also part of LAMPS,  S/MIME already handles multiple signatures each validated with a separate certificate.

Russ