[lamps] Re: Questions and Comments on draft-ietf-lamps-certificate-discovery

[Russ Housley <[e-mail]>]

Suzanne:

> 1. Simultaneous use of multiple certificates/keys
> The abstract mentions support for multi-key/certificate usage, but the current use cases seem to focus primarily on scenarios where one certificate acts as an alternative or backup to another.
> 
> It may be interesting to introduce a Hybrid Certificate use case, where multiple certificates are used simultaneously to authenticate the same session.
> 
> For example, during a post-quantum migration, both a classical certificate and a PQC certificate could contribute to the authentication of a connection. In a TLS context, this could potentially be achieved by introducing a second CertificateVerify message carrying an additional signature generated using the secondary certificate. In this model, both certificates would actively participate in establishing trust rather than serving merely as alternatives to one another.
> 
We need to be careful here.  Some of this is not in scope for the LAMPS WG.  I think it would be fine for LAMPS to provide a mechanism for a relying party to discover that a subject has more than one valid certificate.  However, the use of one or more of those certificate in a security protocol needs to be handeled that the WG that specifies that security protocol.  The exception is S/MIME, as that security protocol is also part of LAMPS,  S/MIME already handles multiple signatures each validated with a separate certificate.

Russ