Delegated Credentials for TLS support
- Dominant language
- Go
- Stars
- 9.5k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
Hello. What would be involved with adding [Delegated Credentials for TLS](https://tlswg.org/tls-subcerts/draft-ietf-tls-subcerts.html) support to cfssl? I believe there are two main cases:
1. cfssl issuing a "delegation certificate" to operators, with which they can generate their own delegated credentials
1. cfssl generating a "delegated credential" from a delgation certificate that has been provided by a ca
Some good introductory reading on Delegated Credentials for TLS is available from [this fine article](https://blog.cloudflare.com/keyless-delegation/); I suspect some folks here may already be familiar with it. ;)
Contributor guide
Research direction
No files, tests, or entry points are named. Start by reading the linked Delegated Credentials specification and introductory article, then map the two requested cases: issuing delegation certificates and generating delegated credentials from one. Done means defining and implementing both supported workflows with clear interfaces and validation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- cryptography, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100