[gnutls-devel] GnuTLS | WIP: add support for 0-RTT (!775)

[Development of GNU's TLS library]

Daiki Ueno commented on a discussion on doc/cha-gtls-app.texi:

>  @funcref{gnutls_init}, and the @funcref{gnutls_handshake} function will
>  return early, allowing the server to send data earlier.
>  
> +Under TLS 1.3, when the server and client share a @acronym{PSK}, the
> +client side can start transmitting application data during handshake.
> +This is called zero round-trip time (0-RTT) mode, and the application
> +data sent in this mode is called early data.
> +
> +Note, however, that early data has weaker security properties than
> +normal application data sent after handshake, such as lack of forward
> +secrecy, no guarantees of non-replay between connections.  Thus it is
> +disabled on the server side by default.  To enable it, set
> + at acronym{GNUTLS_ENABLE_EARLY_DATA} on @funcref{gnutls_init}.  Then the

It's only needed on server; rephrased it to be a bit clearer.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/merge_requests/775#note_109915049
You're receiving this email because of your account on gitlab.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20181018/59eea611/attachment-0001.html>