Skip to content

Commit 75be60f

Browse files
author
ID Bot
committed
Script updating gh-pages from ec6bdf9. [ci skip]
1 parent 5359bde commit 75be60f

9 files changed

Lines changed: 11 additions & 14791 deletions

draft-davidben-tls-merkle-tree-certs.html

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1050,7 +1050,7 @@
10501050
</tr></thead>
10511051
<tfoot><tr>
10521052
<td class="left">Benjamin, et al.</td>
1053-
<td class="center">Expires 9 May 2026</td>
1053+
<td class="center">Expires 10 May 2026</td>
10541054
<td class="right">[Page]</td>
10551055
</tr></tfoot>
10561056
</table>
@@ -1063,12 +1063,12 @@
10631063
<dd class="internet-draft">draft-davidben-tls-merkle-tree-certs-latest</dd>
10641064
<dt class="label-published">Published:</dt>
10651065
<dd class="published">
1066-
<time datetime="2025-11-05" class="published">5 November 2025</time>
1066+
<time datetime="2025-11-06" class="published">6 November 2025</time>
10671067
</dd>
10681068
<dt class="label-intended-status">Intended Status:</dt>
10691069
<dd class="intended-status">Experimental</dd>
10701070
<dt class="label-expires">Expires:</dt>
1071-
<dd class="expires"><time datetime="2026-05-09">9 May 2026</time></dd>
1071+
<dd class="expires"><time datetime="2026-05-10">10 May 2026</time></dd>
10721072
<dt class="label-authors">Authors:</dt>
10731073
<dd class="authors">
10741074
<div class="author">
@@ -1128,7 +1128,7 @@ <h2 id="name-status-of-this-memo">
11281128
time. It is inappropriate to use Internet-Drafts as reference
11291129
material or to cite them other than as "work in progress."<a href="#section-boilerplate.1-3" class="pilcrow"></a></p>
11301130
<p id="section-boilerplate.1-4">
1131-
This Internet-Draft will expire on 9 May 2026.<a href="#section-boilerplate.1-4" class="pilcrow"></a></p>
1131+
This Internet-Draft will expire on 10 May 2026.<a href="#section-boilerplate.1-4" class="pilcrow"></a></p>
11321132
</section>
11331133
</div>
11341134
<div id="copyright">
@@ -4413,7 +4413,7 @@ <h3 id="name-size-estimates">
44134413
<p id="section-6.4-4">The current issuance rate across the Web PKI may not necessarily be representative of the Web PKI after a transition to short-lived certificates. Assuming a certificate lifetime of 7 days, and that subscribers will update their certificates 75% of the way through their lifetime (see <a href="#certificate-renewal" class="auto internal xref">Section 10.4</a>), every certificate will be reissued every 126 hours. This gives issuance rate estimates of around 4,400,000 certificates per hour and 17,000,000 certificates per hour, for the first two values above. Note the larger estimate is across all CAs, while subtrees would only span one CA.<a href="#section-6.4-4" class="pilcrow"></a></p>
44144414
<p id="section-6.4-5">Using the per-CA short lifetime estimate, if the CA mints a checkpoint every 2 seconds, full certificate subtrees will span around 2,500 certificates, leading to 12 hashes in the inclusion proof, or 384 bytes. Full certificates additionally must carry a sufficient set of signatures to meet relying party requirements.<a href="#section-6.4-5" class="pilcrow"></a></p>
44154415
<p id="section-6.4-6">If a new landmark is allocated every hour, signatureless certificate subtrees will span around 4,400,000 certificates, leading to 23 hashes in the inclusion proof, giving an inclusion proof size of 736 bytes, with no signatures. This is significantly smaller than a single ML-DSA-44 signature, 2,420 bytes, and almost ten times smaller than the three ML-DSA-44 signatures necessary to include post-quantum SCTs.<a href="#section-6.4-6" class="pilcrow"></a></p>
4416-
<p id="section-6.4-7">The proof sizes grow logarithmically, so 32 hashes, or 1024 bytes, is sufficient for subtrees of up to 2^32 (4,294,967,296) certificates.<a href="#section-6.4-7" class="pilcrow"></a></p>
4416+
<p id="section-6.4-7">The proof sizes grow logarithmically, so 32 hashes, or 1024 bytes, is sufficient for subtrees of up to 2<sup>32</sup> (4,294,967,296) certificates.<a href="#section-6.4-7" class="pilcrow"></a></p>
44174417
</section>
44184418
</div>
44194419
</section>

draft-davidben-tls-merkle-tree-certs.txt

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -5,13 +5,13 @@
55
Network Working Group D. Benjamin
66
Internet-Draft Google LLC
77
Intended status: Experimental D. O'Brien
8-
Expires: 9 May 2026
8+
Expires: 10 May 2026
99
B. E. Westerbaan
1010
L. Valenta
1111
Cloudflare
1212
F. Valsorda
1313
Geomys
14-
5 November 2025
14+
6 November 2025
1515

1616

1717
Merkle Tree Certificates
@@ -58,7 +58,7 @@ Status of This Memo
5858
time. It is inappropriate to use Internet-Drafts as reference
5959
material or to cite them other than as "work in progress."
6060

61-
This Internet-Draft will expire on 9 May 2026.
61+
This Internet-Draft will expire on 10 May 2026.
6262

6363
Copyright Notice
6464

index.html

Lines changed: 3 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -37,15 +37,7 @@ <h2>Preview for branch <a href="subtree-dfn">subtree-dfn</a></h2>
3737
<tr>
3838
<td><a href="subtree-dfn/draft-davidben-tls-merkle-tree-certs.html" class="html draft-davidben-tls-merkle-tree-certs" title="Merkle Tree Certificates (HTML)">Merkle Tree Certificates</a></td>
3939
<td><a href="subtree-dfn/draft-davidben-tls-merkle-tree-certs.txt" class="txt draft-davidben-tls-merkle-tree-certs" title="Merkle Tree Certificates (Text)">plain text</a></td>
40-
<td>same as main</td>
41-
</tr>
42-
</table>
43-
<h2>Preview for branch <a href="lukevalenta-patch-1">lukevalenta-patch-1</a></h2>
44-
<table id="branch-lukevalenta-patch-1">
45-
<tr>
46-
<td><a href="lukevalenta-patch-1/draft-davidben-tls-merkle-tree-certs.html" class="html draft-davidben-tls-merkle-tree-certs" title="Merkle Tree Certificates (HTML)">Merkle Tree Certificates</a></td>
47-
<td><a href="lukevalenta-patch-1/draft-davidben-tls-merkle-tree-certs.txt" class="txt draft-davidben-tls-merkle-tree-certs" title="Merkle Tree Certificates (Text)">plain text</a></td>
48-
<td><a href="https://author-tools.ietf.org/api/iddiff?url_1=https://davidben.github.io/merkle-tree-certs/draft-davidben-tls-merkle-tree-certs.txt&amp;url_2=https://davidben.github.io/merkle-tree-certs/lukevalenta-patch-1/draft-davidben-tls-merkle-tree-certs.txt" class="diff draft-davidben-tls-merkle-tree-certs">diff with main</a></td>
40+
<td><a href="https://author-tools.ietf.org/api/iddiff?url_1=https://davidben.github.io/merkle-tree-certs/draft-davidben-tls-merkle-tree-certs.txt&amp;url_2=https://davidben.github.io/merkle-tree-certs/subtree-dfn/draft-davidben-tls-merkle-tree-certs.txt" class="diff draft-davidben-tls-merkle-tree-certs">diff with main</a></td>
4941
</tr>
5042
</table>
5143
<h2>Preview for branch <a href="subtree-bit-ceil">subtree-bit-ceil</a></h2>
@@ -70,15 +62,15 @@ <h2>Preview for branch <a href="bas/charter-private-twaek">bas/charter-private-t
7062
<tr>
7163
<td><a href="bas/charter-private-twaek/draft-davidben-tls-merkle-tree-certs.html" class="html draft-davidben-tls-merkle-tree-certs" title="Merkle Tree Certificates (HTML)">Merkle Tree Certificates</a></td>
7264
<td><a href="bas/charter-private-twaek/draft-davidben-tls-merkle-tree-certs.txt" class="txt draft-davidben-tls-merkle-tree-certs" title="Merkle Tree Certificates (Text)">plain text</a></td>
73-
<td>same as main</td>
65+
<td><a href="https://author-tools.ietf.org/api/iddiff?url_1=https://davidben.github.io/merkle-tree-certs/draft-davidben-tls-merkle-tree-certs.txt&amp;url_2=https://davidben.github.io/merkle-tree-certs/bas/charter-private-twaek/draft-davidben-tls-merkle-tree-certs.txt" class="diff draft-davidben-tls-merkle-tree-certs">diff with main</a></td>
7466
</tr>
7567
</table>
7668
<h2>Preview for branch <a href="bas/delivery">bas/delivery</a></h2>
7769
<table id="branch-bas/delivery">
7870
<tr>
7971
<td><a href="bas/delivery/draft-davidben-tls-merkle-tree-certs.html" class="html draft-davidben-tls-merkle-tree-certs" title="Merkle Tree Certificates (HTML)">Merkle Tree Certificates</a></td>
8072
<td><a href="bas/delivery/draft-davidben-tls-merkle-tree-certs.txt" class="txt draft-davidben-tls-merkle-tree-certs" title="Merkle Tree Certificates (Text)">plain text</a></td>
81-
<td>same as main</td>
73+
<td><a href="https://author-tools.ietf.org/api/iddiff?url_1=https://davidben.github.io/merkle-tree-certs/draft-davidben-tls-merkle-tree-certs.txt&amp;url_2=https://davidben.github.io/merkle-tree-certs/bas/delivery/draft-davidben-tls-merkle-tree-certs.txt" class="diff draft-davidben-tls-merkle-tree-certs">diff with main</a></td>
8274
</tr>
8375
</table>
8476
<h2>Preview for branch <a href="draft-davidben-tls-merkle-tree-certs-08">draft-davidben-tls-merkle-tree-certs-08</a></h2>
@@ -89,14 +81,6 @@ <h2>Preview for branch <a href="draft-davidben-tls-merkle-tree-certs-08">draft-d
8981
<td><a href="https://author-tools.ietf.org/api/iddiff?url_1=https://davidben.github.io/merkle-tree-certs/draft-davidben-tls-merkle-tree-certs.txt&amp;url_2=https://davidben.github.io/merkle-tree-certs/draft-davidben-tls-merkle-tree-certs-08/draft-davidben-tls-merkle-tree-certs.txt" class="diff draft-davidben-tls-merkle-tree-certs">diff with main</a></td>
9082
</tr>
9183
</table>
92-
<h2>Preview for branch <a href="unify-consistency">unify-consistency</a></h2>
93-
<table id="branch-unify-consistency">
94-
<tr>
95-
<td><a href="unify-consistency/draft-davidben-tls-merkle-tree-certs.html" class="html draft-davidben-tls-merkle-tree-certs" title="Merkle Tree Certificates (HTML)">Merkle Tree Certificates</a></td>
96-
<td><a href="unify-consistency/draft-davidben-tls-merkle-tree-certs.txt" class="txt draft-davidben-tls-merkle-tree-certs" title="Merkle Tree Certificates (Text)">plain text</a></td>
97-
<td><a href="https://author-tools.ietf.org/api/iddiff?url_1=https://davidben.github.io/merkle-tree-certs/draft-davidben-tls-merkle-tree-certs.txt&amp;url_2=https://davidben.github.io/merkle-tree-certs/unify-consistency/draft-davidben-tls-merkle-tree-certs.txt" class="diff draft-davidben-tls-merkle-tree-certs">diff with main</a></td>
98-
</tr>
99-
</table>
10084
<script>
10185
window.onload = function() {
10286
var referrer_branch = 'main';

0 commit comments

Comments
 (0)