[gnutls-devel] GnuTLS | WIP: add support for 0-RTT (!775)

[Development of GNU's TLS library]

Daiki Ueno commented on a discussion on doc/cha-gtls-app.texi:

>  return early, allowing the server to send data earlier.
>  
> +Under TLS 1.3, when the server and client share a @acronym{PSK}, the
> +client side can start transmitting application data during handshake.
> +This is called zero round-trip time (0-RTT) mode, and the application
> +data sent in this mode is called early data.
> +
> +Note, however, that early data has weaker security properties than
> +normal application data sent after handshake, such as lack of forward
> +secrecy, no guarantees of non-replay between connections.  Thus it is
> +disabled on the server side by default.  To enable it, set
> + at acronym{GNUTLS_ENABLE_EARLY_DATA} on @funcref{gnutls_init}.  Then the
> +client can send early data with @funcref{gnutls_record_send_early_data}
> +and the server can receive it with
> + at funcref{gnutls_record_recv_early_data}.
> +

Currently, the data is kept until the server calls `gnutls_record_recv_early_data` so the answer is both.

I think it makes more sense to keep it only during handshake and let the server retrieve it through a handshake callback. Let me try that.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/merge_requests/775#note_109485057
You're receiving this email because of your account on gitlab.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20181017/63b8b0ee/attachment.html>