Timeline for TLS Cipher Suites and PKI
Current License: CC BY-SA 4.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 26, 2018 at 4:59 | comment | added | dave_thompson_085 | ... TLS1.3 changes this: keyx and auth are no longer in the ciphersuite, keyx is always (EC)DHE or PSK, and server cert is controlled by client sigalgs. In all versions, client cert is controlled (only) by server certreq and yes all 3 are now common. | |
| Oct 26, 2018 at 4:56 | comment | added | dave_thompson_085 | TLS through 1.2 has server (classic)DHE-DSS (meaning DSA, for hysterical raisins) and ECDHE-ECDSA and both-RSA, but never DHE-ECDSA or ECDHE-DSS/DSA. RSA is technically the most adopted asymmetric encryption in TLS because it's the only one; DSA and ECDSA are signature-only and RSA and DSA signature have been almost universal since last century (starting with SSL3) and ECDSA very common since last decade. What's hard is to get a DSA cert from a public CA, although I've seen some in internal/enterprise setups. Some public CAs now do offer ECC(ECDSA) certs. ... | |
| Oct 25, 2018 at 23:04 | vote | accept | Sushiman | ||
| Oct 25, 2018 at 18:57 | history | answered | Mike Ounsworth | CC BY-SA 4.0 |