[gnutls-devel] GnuTLS | WIP: add support for 0-RTT (!775)

Development of GNU's TLS library gnutls-devel at lists.gnutls.org
Fri Oct 19 18:17:24 CEST 2018


By the way, I am currently implementing ClientHello recording (RFC 8446 8.2), as anti-replay measure.  That suggests that in some occasions (e.g. a ticket arrived out of time window), the server should reject 0-RTT but can continue with 1-RTT.  In that case, the client may want to resend the early data as a normal application data after handshake.  So rather than having a separate send function (`gnutls_record_send_early_data`), it might make more sense to reuse `gnutls_record_send2` and allow it to fallback from 0-RTT to 1-RTT.

What do you think?

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/merge_requests/775#note_110331340
You're receiving this email because of your account on gitlab.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20181019/163e2214/attachment.html>


More information about the Gnutls-devel mailing list