Re: [TLS] TLS 1.3 Authentication using ETSI TS 103 097 and IEEE 1609.2 certificates

[Ilari Liusvaara <[e-mail]>]

On Mon, Aug 27, 2018 at 06:21:15PM +0200, Mounira Msahli wrote:
> Hi Hubert, 
> 
> I can do the exercise but the result will be two sections totally
> decorrelated: one for TLS 1.3 and one for TLS 1.2. Two drafts in
> one document.

The certificate message might be bit annoying as it has different
format in TLS 1.2 and 1.3. But most textual discussion probably can be
shared between the versions.
 
> - The handshake phase in TLS 1.2 is different from handshake/TLS1.3

One could abbrevate the handshake traces to just show the relevant
parts (which could also cut some clutter)? I think the relevant
messages always occur in the same order (clienthello, serverhello/
encryptedextensions, certificate, certificate).

> - The certificate type is different. One uses cert_type and the
> other uses extension defined in [RFC7250]. 

cert_type is deprecated. One should use the RFC7250 extensions even in
TLS 1.2. The TLS 1.3 certificate format negotiation works the same as
in TLS 1.2, with exception of extensions being in different message.


-Ilari