Re: [TLS] DSS with other than SHA-1 algorithms

[Nikos Mavrogiannopoulos <[e-mail]>]

On 05/10/2011 03:49 PM, Peter Gutmann wrote:

>> So, nobody at all has an ECDSA certificate,
> Nobody has an ECSDA cert *signed by a trusted CA*, i.e. something that a
> browser will connect to without setting off all sorts of alarms.

Indeed but on the same study you based your point on deprecating DSA.

>> but it makes sense to only assign ciphersuites to algorithm sets that require
>> ECDSA certificates because that is the common case?
> It's the common case based on a survey of all (known) publicly-deployed
> servers running TLS-ECC, representing (at least) Microsoft, Apache (presumably
> OpenSSL), and NSS.  That's the three biggest players in the market (and some
> smaller ones as well), so I think it's a pretty good representative sample.

I don't really understand. So is ECDSA used for self-signed
certificates? Is it used for client certificates (and thus not
discovered by this study?). According to me this study would be an
argument for the _RSA ecc ciphersuites rather than the ECDSA.

regards,
Nikos