tls-2----Page:10
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
|
Certificate Hash Certificate hash needs to be mandatory If the hash is not included with the client certificate URL, the finished message will not factor in the name associated with the key. Hash needs agility The protocol mandates SHA-1, which is fine as a default, but there is no mechanism to specify a stronger algorithm. |