aboutsummaryrefslogtreecommitdiff
path: root/spec/tor-spec
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2023-12-14 12:47:54 -0500
committerNick Mathewson <nickm@torproject.org>2023-12-14 12:47:54 -0500
commite9001cd473ff005c8ad8b63a5af36e1e04692941 (patch)
tree318d5be253b9f6ca65abdd82e6de7bf56764d139 /spec/tor-spec
parent46f947115f4cce14b7b2368a414c765fc18e86b4 (diff)
downloadtorspec-e9001cd473ff005c8ad8b63a5af36e1e04692941.tar.gz
torspec-e9001cd473ff005c8ad8b63a5af36e1e04692941.zip
Clarify that authentication is required.
Diffstat (limited to 'spec/tor-spec')
-rw-r--r--spec/tor-spec/negotiating-channels.md4
1 files changed, 2 insertions, 2 deletions
diff --git a/spec/tor-spec/negotiating-channels.md b/spec/tor-spec/negotiating-channels.md
index dfe82df..84b40c0 100644
--- a/spec/tor-spec/negotiating-channels.md
+++ b/spec/tor-spec/negotiating-channels.md
@@ -176,8 +176,8 @@ to the TLS certificate presented during the TLS handshake.
> was already proven during the TLS hadnshake itself.
From a CERTS cell,
-an initiator can authenticate the responder
-when all the following apply:
+an initiator has enough information to authenticate the responder.
+To do so, the initiator MUST check that all of the following apply:
- The CERTS cell contains exactly one CertType 4 Ed25519
`IDENTITY_V_SIGNING_CERT`.