TLS1.3 certificate selection by the server

Regarding 

ISSUE-59: Filtering & Versioning WebID Certificates
https://www.w3.org/2005/Incubator/webid/track/issues/59

ISSUE-62: null certificate_authorities list
https://www.w3.org/2005/Incubator/webid/track/issues/62

TLS 1.3 seems to have new functionality which may help. See
"certificate_extensions" section in 

http://tlswg.github.io/tls13-spec/#certificate-request 

I am not sure from reading this wether this allows for existential quantification:
ie give me a certificate that has a subject alternative name, without specifying exactly
which one.

Henry

Received on Wednesday, 16 March 2016 11:53:11 UTC