Hacker News Reader

By the time time people switch to ECDSA, they should switch to Ed25519 or Ed448, maybe with ECDSA fallback (with web server and TLS library support for multiple keys for same domain, depending on ClientHello).

View on HN

Have Ed25519 or Ed448 been standardized into TLS? I've never seen a website with that before.

They will be: https://tools.ietf.org/html/draft-ietf-tls-curve25519-01

So far, that's only key exchange, not signatures [1]. CFRG is still debating a signature method [2].

1 - https://tools.ietf.org/html/draft-irtf-cfrg-curves-07

2 - https://www.ietf.org/mail-archive/web/cfrg/current/msg07291....

Ah, true. Hopefully, they will use the same curves, with EdDSA.

Reply on news.ycombinator.com