Removing expiry dates for TOFU

Petite Abeille petite.abeille at gmail.com
Wed Jul 8 22:27:37 BST 2020



> On Jul 8, 2020, at 20:25, Phil Leblanc <philanc at gmail.com> wrote:
> 
> Yes. Looks interesting, and it goes in the right direction.
> Unfortunately, the RFC is already quite old (2014)  and according to
> Wikipedia, it is only supported by GnuTLS (I didn't check directly).
> 
> Do you know if it is already used in some visible applications?

Hmm, no :) Just stumbled upon it on the openssl mailing list, where someone was asking if it was supported:

RFC 7250 raw public keys?
https://www.mail-archive.com/openssl-users@openssl.org/msg88412.html


There is an open issue for it:

Raw Public Key (RFC 7250) support
https://github.com/openssl/openssl/issues/6929


mbedtls seems to have something:

Support Raw Public Key mode (RFC7250) 
https://github.com/ARMmbed/mbedtls/pull/336


More information about the Gemini mailing list