Skip to content

Commit b686459

Browse files
committed
Proofreading
1 parent 7525e21 commit b686459

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

draft-davidben-tls-trust-expr.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -714,7 +714,7 @@ The multi-certificate model removes this constraint. If a subscriber's CA is dis
714714

715715
## Other Root Transitions
716716

717-
The mechanisms in this document can aid PKI transitions beyond key rotation. For example, a PKI may transition from classical roots to post-quantum ones. A CA operator may generate a postquantum root CA and, using the mechanism in {{acme-extension}}, issue from the classical and postquantum roots concurrently. The subscriber will then, transparently and with no configuration change, serve both. As in {{key-rotation}}, newer relying parties can then remove the classical roots, while older relying parties continue to function.
717+
The mechanisms in this document can aid PKI transitions beyond key rotation. For example, a CA operator may generate a postquantum root CA and use the mechanism in {{acme-extension}} to issue from the classical and postquantum roots concurrently. The subscriber will then, transparently and with no configuration change, serve both. As in {{key-rotation}}, newer relying parties can then remove the classical roots, while older relying parties continue to function.
718718

719719
This same procedure may also be used to transition between newer, more size-efficient signature algorithms, as they are developed.
720720

explainer.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -126,7 +126,7 @@ The multi-certificate model removes this constraint. If a subscriber's CA is dis
126126

127127
## Other Root Transitions
128128

129-
The mechanisms in this document can aid PKI transitions beyond key rotation. For example, a PKI may transition from classical roots to post-quantum ones. A CA operator may generate a postquantum root CA and, using the mechanism in {{acme-extension}}, issue from the classical and postquantum roots concurrently. The subscriber will then, transparently and with no configuration change, serve both. As in {{key-rotation}}, newer relying parties can then remove the classical roots, while older relying parties continue to function.
129+
The mechanisms in this document can aid PKI transitions beyond key rotation. For example, a CA operator may generate a postquantum root CA and use the mechanism in {{acme-extension}} to issue from the classical and postquantum roots concurrently. The subscriber will then, transparently and with no configuration change, serve both. As in {{key-rotation}}, newer relying parties can then remove the classical roots, while older relying parties continue to function.
130130

131131
This same procedure may also be used to transition between newer, more size-efficient signature algorithms, as they are developed.
132132

0 commit comments

Comments
 (0)