[gnutls-devel] GnuTLS | TLS 1.3: ignore "early_data" extension (!706)

[Development of GNU's TLS library]

Nikos Mavrogiannopoulos started a new discussion on lib/record.c:

>  				  "Discarded message[%u] due to invalid decryption\n",
>  				  (unsigned int)
>  				  _gnutls_uint64touint32(packet_sequence));
> +
> +		/* as 0-RTT is not implemented yet, when early data is
> +		 * indicated, skip decryption failure up to
> +		 * max_early_data_size. */
> +		if (session->internals.early_data_indicated &&

There is an audit log above which could be too loud if real 0-rtt is added. What if we use separate logging levels (e.g., record_log when discarding early data)? That way there will be less noise due to expected workflow.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/merge_requests/706#note_90324681
You're receiving this email because of your account on gitlab.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20180725/37ea87a7/attachment.html>