Re: SSL/TLS everywhere fail

> On 7 Dec 2015, at 12:25, Adrien de Croy <adrien@qbik.com> wrote:
> 
> 
> um
> 
> in TLS the Server cert message includes the server cert in ASN.1 format including the public key
> 
> So I don't see this being any different.  Or am I missing something?
> 
> Adrien
> 

The difference is that in TLS the certificate is *validated*: there is a process used for determining that the key in this certificate is acceptable to use for this data. The draft under discussion includes no such validation process.

Cory