Open MikeBishop opened 8 years ago
Ugh, DANE. We run the risk of being overly generic here. Let's just assume that it's a certificate and then do what TLS does and pack non-certificate things into certificates if it comes to that.
Addressed in the split.
From Andrei:
I was initially uncertain that there was a use-case for proving multiple raw keys (since what we’re ultimately trying to prove with certs is a strong name binding), but coupled with DANE records as supporting data, I think you could get a name binding off a raw key as well. Browsers probably won’t support it, but that doesn’t mean the protocol couldn’t allow the flexibility to do it for IoT.