This document does a good job of documenting current practice, and hence I support (and my thanks to Martin for addressing an issue I communicated to him off-list).
I think that timestamping and/or autosegmenting entries in the file format would be a useful extension (current implementations, such as Wireshark, need to linearly search through potentially large SSLKEYLOG files). Y(J)S (usually just lurking on this list)
_______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls
