[tech] support for Ed25519 in clients

- Johann Galle <johann at qwertqwefsday.eu>

@ Thu, 08 Apr 2021 00:33 +0200

────────────────────────────────────────────────────────────────────────────────

Hello,

Since implementing automatic certificate generation in Agate and choosing

Ed25519 as the default algorithm over ECDSA [1], I have received multiple

complaints about server operators not being able to connect to their own

servers because clients seemingly did not support this signing algorithm.

Some that were mentioned by name were Ariane, Deedum and portal.mozz.us.

I have to agree with Stéphane that this should not be the case, and other

people raised concerns about which TLS libraries are used as well.

Although I will most likely have to switch the default algorithm to ECDSA

since support for Ed25519 seems so bad, please check if a browser that

you maintain (or the library it uses respectively) does support Ed25519.

If it does not, please reconsider the library choice.

Regards,

Johann

[1] The reasoning being mainly derived from what followed in this thread:

<https://lists.orbitalfox.eu/archives/gemini/2021/006134.html>

It would be interesting to see if this has made any impact towards

quantitative usage of Ed25519 according to Lupa.

════════════════════════════════════════════════════════════════════════════════