tlswg/tls-subcerts

Issues

• Address Paul's AD review

  #104 opened 2 years ago by seanturner
  1

• Considerations about other CertificateTypes?

  #107 opened 3 years ago by boaks
  0

• Addresss Directorate Reviews

  #101 opened 3 years ago by seanturner
  2

• Expiry behavior ambiguity

  #96 opened 3 years ago by jsalowey
  1

• Add DTLS

  #94 opened 3 years ago by seanturner
  0

• mglt: Refactor s1

  #84 opened 3 years ago by seanturner
  0

• mglt: more text for downgrade

  #86 opened 3 years ago by seanturner
  0

• mglt: additional text about different sigs for server cert and DC

  #89 opened 3 years ago by seanturner
  0

• mglt: s7.6 mentions TLS1.2?

  #91 opened 3 years ago by seanturner
  0

• Address WGLC #2 comments

  #78 opened 4 years ago by grittygrease
  1

• [WGLC] Address client clock skew

  #68 opened 4 years ago by chris-wood
  1

• There is something wrong with the formatting of the numbered list in Section 4.1.3.

  #71 opened 4 years ago by grittygrease
  0

• [WGLC] Private vs secret key

  #65 opened 4 years ago by chris-wood
  1

• [WGLC] Clarify extension vs EKU usage

  #67 opened 4 years ago by chris-wood
  1

• [WGLC] Note problems with DCs having lifetimes matching issuing certificates

  #69 opened 4 years ago by chris-wood
  4

• [WGLC] Clarify compromise text

  #66 opened 4 years ago by chris-wood
  1

• [WGLC] Nits

  #70 opened 4 years ago by chris-wood
  1

• Should sever abort connection when server dc SignatureScheme mismatch SignatureSchemeList in client dc extension?

  #64 opened 5 years ago by Neo-ZK
  1

• A propose of signature context string

  #63 opened 5 years ago by Neo-ZK
  5

• Will the next version of draft define how to store delegated credential as file?

  #62 opened 5 years ago by Neo-ZK
  1

• Editor drafts are out-of-date

  #57 opened 5 years ago by Lekensteyn
  2

• Add RSA signing oracle concerns to security considerations

  #59 opened 5 years ago by grittygrease
  0

• Address issues in -06 raised by Ilari Liusvaara

  #53 opened 5 years ago by grittygrease
  1

• Point to Formal Analysis

  #31 opened 5 years ago by grittygrease
  2

• Assign codepoint for delegated_credentials extension

  #41 opened 5 years ago by siyengar
  6

• Change the ASN.1 module request to IANA

  #48 opened 5 years ago by grittygrease
  1

• Add support for advertising supported signature schemes

  #43 opened 5 years ago by grittygrease
  1

• Security Considerations: network layer

  #42 opened 5 years ago by sayrer
  5

• Add language that enables an application profile to override the maximum DC lifetime

  #44 opened 5 years ago by grittygrease
  0

• PSS

  #28 opened 5 years ago by martinthomson
  12

• ASN.1 Module

  #37 opened 5 years ago by seanturner
  0

• Consider changing name from "Delegated Credentials" to "Delegated Authentication Keys"

  #33 opened 5 years ago by grittygrease
  2

• Author affiliation

  #29 opened 5 years ago by martinthomson
  3

• Time to cut ties with LURK?

  #30 opened 5 years ago by martinthomson
  1

• Update references to ACME and TLS 1.3

  #32 opened 5 years ago by grittygrease
  0

• Mention interaction of DCs and tickets

  #34 opened 5 years ago by siyengar
  0

• Add text around using delegated credentials in client certificates.

  #24 opened 5 years ago by grittygrease
  2

• Add proposed TLS extension

  #23 opened 5 years ago by grittygrease
  0

• Consider including client's max validity period in CH DC extension

  #14 opened 6 years ago by chris-wood
  3

• Loose binding of indicated signature scheme to handshake signature scheme

  #4 opened 6 years ago by cjpatton
  7