Reject RSA public exponent 1

[pasi.eronen@…]

An old issue, but might be worth saying in the spec...

​http://www.imc.org/ietf-pkix/old-archive-04/msg00003.html

Some time ago, mozilla was modified to detect and reject RSA
keys with public exponents equal to 1.  Presumably, the
readers of this list need no explanation of the implications
of such keys.

Now, mozilla users are encountering web sites whose certs
have such keys.  At least one public CA has apparently
issued one or more such certs.

I'm reporting this here to alert the readers of this list
who may wish to ensure that their implementations detect
such keys, and to suggest that perhaps the TLS RFC should
explicitly forbid the use of any public keys (RSA or
otherwise) that facilitate such weak encryption and/or
authentication by requiring implentations to detect and
reject them.

[ekr@…]

This seems likea general crypto issue.