[tech] support for Ed25519 in clients
Spool Five eoin at spool-five.com
Thu Apr 8 00:10:40 BST 2021
> Hello,
>
> Since implementing automatic certificate generation in Agate and choosing
> Ed25519 as the default algorithm over ECDSA [1], I have received multiple
> complaints about server operators not being able to connect to their own
> servers because clients seemingly did not support this signing algorithm.
>
> Some that were mentioned by name were Ariane, Deedum and portal.mozz.us.
> I have to agree with St?phane that this should not be the case, and other
> people raised concerns about which TLS libraries are used as well.
>
> Although I will most likely have to switch the default algorithm to ECDSA
> since support for Ed25519 seems so bad, please check if a browser that
> you maintain (or the library it uses respectively) does support Ed25519.
> If it does not, please reconsider the library choice.
>
> Regards,
> Johann
I am currently facing this issue too. It is also the case with
Bombadillo. What is the best thing to do here? Use different certs?
- Eoin
Archive home | About this archive