💾 Archived View for rawtext.club › ~sloum › geminilist › 006294.gmi captured on 2023-09-08 at 17:01:59. Gemini links have been rewritten to link to archived content
⬅️ Previous capture (2021-11-30)
-=-=-=-=-=-=-
Spool Five eoin at spool-five.com
Thu Apr 8 00:10:40 BST 2021
- - - - - - - - - - - - - - - - - - -
Hello,
Since implementing automatic certificate generation in Agate and choosing
Ed25519 as the default algorithm over ECDSA [1], I have received multiple
complaints about server operators not being able to connect to their own
servers because clients seemingly did not support this signing algorithm.
Some that were mentioned by name were Ariane, Deedum and portal.mozz.us.
I have to agree with St?phane that this should not be the case, and other
people raised concerns about which TLS libraries are used as well.
Although I will most likely have to switch the default algorithm to ECDSA
since support for Ed25519 seems so bad, please check if a browser that
you maintain (or the library it uses respectively) does support Ed25519.
If it does not, please reconsider the library choice.
Regards,
Johann
I am currently facing this issue too. It is also the case withBombadillo. What is the best thing to do here? Use different certs?
- Eoin