Re: [TLS] I-D Action: draft-ietf-tls-rfc4492bis-00.txt

Viktor Dukhovni <> Tue, 02 December 2014 17:41 UTC

Return-Path: <>
Received: from localhost ( []) by (Postfix) with ESMTP id 3FECB1A1EEA for <>; Tue, 2 Dec 2014 09:41:19 -0800 (PST)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -1.3
X-Spam-Status: No, score=-1.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_71=0.6] autolearn=no
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id cIOApGVL3ISM for <>; Tue, 2 Dec 2014 09:41:18 -0800 (PST)
Received: from ( []) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by (Postfix) with ESMTPS id BC0881A6FBB for <>; Tue, 2 Dec 2014 09:40:34 -0800 (PST)
Received: by (Postfix, from userid 1034) id 7458A282FD0; Tue, 2 Dec 2014 17:40:33 +0000 (UTC)
Date: Tue, 02 Dec 2014 17:40:33 +0000
From: Viktor Dukhovni <>
Message-ID: <>
References: <> <>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <>
User-Agent: Mutt/1.5.23 (2014-03-12)
Subject: Re: [TLS] I-D Action: draft-ietf-tls-rfc4492bis-00.txt
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Tue, 02 Dec 2014 17:41:19 -0000

On Tue, Dec 02, 2014 at 02:48:41PM +0100, Henrick Hellstr?m wrote:

>    Server implementations SHOULD support all of the following cipher
>    suites, and client implementations SHOULD support at least one of
>    them:
> Isn't this recommendation problematic? I don't think it is very common for
> servers to have more than one certificate, and a server can't support all
> four of these cipher suites, unless it has both one RSA certificate and one
> EC certificate.

Given the far from universal support for ECDSA by clients, a server
that wants to use ECDSA when possible, but still wants to interoperate
with more than just a select few clients really SHOULD have both
ECDSA and RSA certificates.

The main reason it is not common for servers to have more than one
certificate is that generally they have only RSA certificates,
which have (practically) universal support.

For what it is worth, Postfix (via OpenSSL) supports simultaneous
deployment of both RSA and ECDSA keys/certs.  In the near to medium
term, any server that wants to deploy ECDSA should also deploy RSA,
to avoid interoperability issues with a sizeable fraction of clients.