Hacker News Reader

The way forward will probably be to switch to ECDSA anyway, just like Cloudflare "Universal SSL".

Yeah (author here) I'd like to do a followup with ECC. There's a few cloud providers who only take RSA keys but ECC is otherwise fairly well supported these days.

I'll also amend the openssl / certreq commands CertSimple generate to provide an ECC option.

By the time time people switch to ECDSA, they should switch to Ed25519 or Ed448, maybe with ECDSA fallback (with web server and TLS library support for multiple keys for same domain, depending on ClientHello).

Have Ed25519 or Ed448 been standardized into TLS? I've never seen a website with that before.

They will be: https://tools.ietf.org/html/draft-ietf-tls-curve25519-01

So far, that's only key exchange, not signatures [1]. CFRG is still debating a signature method [2].

1 - https://tools.ietf.org/html/draft-irtf-cfrg-curves-07

2 - https://www.ietf.org/mail-archive/web/cfrg/current/msg07291....

Ah, true. Hopefully, they will use the same curves, with EdDSA.

Reply on news.ycombinator.com