Re: In-the-wild implementations of RFC6955?

Michael StJohns <[email protected]> writes:

>Is anyone aware of
>
>a)  implementation of CSR software which can generate requests for ECDH
>certificates

[crickets]

While it's difficult to prove a negative, ECDH certs are just a rerun of DH
certificates from 20 years ago, which were supported by exactly nobody [0], so
I would assume it's no different for ECDH certs.

In addition even if you could somehow generate an (EC)DH cert I'd be even more
surprised if you could find anything that knew what to do with it when it saw
it.

So just out of curiosity, to help understand the use case since I've never
seen one before and it'd be interesting to hear about it, please lie on this
couch and tell me why/how you're planning on using these things.  And
remember, this is for posterity, so be honest — how do ECDH certs make you
feel?

Peter.

[0] Well, a few implementations went through the motions of half-hearted token
    support so they couldn't be accused of being non-standards-compliant, but
    not much more than that.