Re: draft-igoe-secsh-x509v3-00

[Nicolas Williams <Nicolas.Williams%sun.com@localhost>]

On Thu, Nov 19, 2009 at 08:06:58PM -0500, Jeffrey Hutzelman wrote:
> --On Thursday, November 19, 2009 01:11:43 PM -0700 Joseph Galbraith 
> <galb-list%vandyke.com@localhost> wrote:
> 
> >If I'm not mistaken, all current key exchange algorithms
> >(all derivatives of diffie hellman) only require digitalSignature,
> >since the hostkey isn't actually used during the key agreement
> >stage.  Does that sound correct?
> 
> Yes, I believe that's currently true.

Right.  RFC4432 introduced RSA key transport, but hosts are still
authenticated via public key signatures.

Nico
--