Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Say something about how large cert messages may cause congestion #174

Closed
ekr opened this issue Dec 7, 2020 · 1 comment
Closed

Say something about how large cert messages may cause congestion #174

ekr opened this issue Dec 7, 2020 · 1 comment

Comments

@ekr
Copy link
Collaborator

ekr commented Dec 7, 2020

No description provided.

@hannestschofenig
Copy link
Collaborator

DTLS 1.3 does not really change this aspect compared to earlier DTLS versions.

We could reference a number of the other TLS WG documents that attempt to reduce the size of the certificate message, such as

  • Client Certificate URL
  • Cached Info
  • Certificate Compression
  • Following the guidelines in RFC 7925
  • Other certificate types

It may be possible to use the fragmentation mechanism to send one certificate after the other in the certificate chain.

Is this what you had in mind?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants