Re: Certificate requests for encryption keys

[Ben Laurie <ben@xxxxxxxxxxxxx>]

Keith Brady wrote:
> 
> > I feel sure I'm going to regret asking, but why won't this work with a
> > DH key?
> 
> Because you can't sign with a D-H encryption key, it can only perform
> encryption operations.

??? If I HMAC then DH the result, isn't that a signature?

Cheers,

Ben.

--
http://www.apache-ssl.org/ben.html

"My grandfather once told me that there are two kinds of people: those
who work and those who take the credit. He told me to try to be in the
first group; there was less competition there."
     - Indira Gandhi