Subject: [TLS] CertificateRequest in TLS 1.2

From: Mike <[email-masked]>
Date: Mon, 05 Feb 2007 11:55:58 -0800

In TLS 1.2, a CertificateRequest message has a list
of HashTypes specifying the acceptable hashes used
in certificate signatures.  There is no guidance
on the ordering of these values.  I would suggest
that the server should specify them in the order
that it prefers.  The client would scan the list
in order, and return a certificate using the first
matching hash algorithm.

Mike

_______________________________________________
TLS mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/tls