search

davidben / merkle-tree-certs

Other
9 stars 3 forks source link

GREASE #53

Open bwesterb opened 1 year ago

bwesterb commented 1 year ago

Where should we add some GREASE?

  1. We should clearly GREASE proof_type so that TA negotiation does not ossify.
  2. SubjectType is not negotiated separately, so no GREASE is required, cf #7
  3. RPs must ignore unknown claims in an assertion, so it seems to be a good candidate for grease. However, do we really have flexibility in claims to begin with? For instance, suppose we do not support IP ranges (#9) in the first version, but add it later on. How would the server know it can send an assertion with a range?
  4. If we add extensions to TLSSubjectInfo #38, we should GREASE them.