{"type":"rich","version":"1.0","author_name":"npub17ty4mumkv43w8wtt0xsz2jypck0gvw0j8xrcg6tpea25z2nh7meqf4qgyd","author_url":"https://nostr.ae/npub17ty4mumkv43w8wtt0xsz2jypck0gvw0j8xrcg6tpea25z2nh7meqf4qgyd","provider_name":"njump","provider_url":"https://nostr.ae","html":"📅 Original date posted:2014-03-21\n📝 Original message:On Fri, Mar 21, 2014 at 11:59 AM, Adam Back \u003cadam at cypherspace.org\u003e wrote:\n\n\u003e Maybe its time to explore raw ECDSA signed message based certs.\n\u003e\n\nIf you want to create and run a new CA, by all means. But I bet you don't.\nSo we're stuck with the current system for now.\n\n\n\u003e btw I dont think its quite 4kB.  eg bitpay's looks to be about 1.5kB in der\n\u003e format.  And they contain a 2048-bit RSA server key, and 2048-bit RSA\n\u003e signatures (256byte each right there = 512bytes).  And even 2048 is weaker\n\u003e than 256-bit ECDSA.\n\n\nBut you have to chain up to the root.\n\nThe only reason more certs aren't ECC is backwards compatibility. Some old\nbrowsers don't know how to handle them. It wasn't so long ago that Fedora\nand Android were deleting ECC code from upstream libraries before shipping\nthem, either for patent reasons for disk space saving measures.\n\nBut it's possible to get ECC certs if you want. For example, Entrust is\nstarting to sell them:\n\nhttp://www.entrust.net/ecc-certs/index.htm\n\nBut their intermediate cert is still RSA. My understanding is that ECC\nroots for many CA's have been submitted and are now included, but of course\n\"give up compatibility with lots of users\" vs \"save a bit of cpu time and a\nhandful of bytes\" is no real competition so it will be a long time until\nmost websites are using ECC certs.\n\nRegardless, it's all irrelevant. Who knows when we might want to add\nanother feature that uses some bytes into PaymentRequests. Stuffing them\ninto a QR code will never make much sense IMO - it's far more sensible to\njust use Bluetooth where the data size constraints are so much easier.\n-------------- next part --------------\nAn HTML attachment was scrubbed...\nURL: \u003chttp://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20140321/a4fc4e27/attachment.html\u003e"}