add note on key certs

This commit is contained in:
zzz
2025-01-25 08:52:43 -05:00
parent 5bde2adfd3
commit 7a81888db3

View File

@ -498,6 +498,11 @@ Notes
* Implementers are cautioned to prohibit excess data in Key Certificates.
The appropriate length for each certificate type should be enforced.
* A KEY certificate with types 0,0 (ElGamal,DSA_SHA1) is allowed but discouraged.
It is not well-tested and may cause issues in some implementations.
Use a NULL certificate in the canonical representation of a
(ElGamal,DSA_SHA1) Destination or RouterIdentity, which will be 4 bytes shorter
than using a KEY certificate.
.. _type-Mapping: