Skip to content
This repository has been archived by the owner on Aug 19, 2022. It is now read-only.

use a prefix when signing the public key #25

Merged
merged 1 commit into from
Apr 7, 2019

Conversation

marten-seemann
Copy link
Collaborator

I was thinking of including the version here as well, or as least the string representation of the OID of the certificate extension, e.g. "libp2p-tls-handshake 1.3.6.1.4.1.53594.1.1:" WDYT?

Copy link
Contributor

@vyzo vyzo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

appending the version is an overkill, this is just fine.

Copy link
Member

@Stebalien Stebalien left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We could include the version but I don't believe it's necessary. Someone could try an upgrade/downgrade attack but they'd still need our ephemeral private key to sign the cert itself.

Of course, we could just include it anyways to be safe, it can't hurt. I'll leave that up to you.

@marten-seemann marten-seemann merged commit 3f4a541 into new-handshake Apr 7, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants