On Thu, Jan 09, 2025 at 02:46:33PM +0000, Salz, Rich wrote:
> > Nice careful reading, Valery.
>
> EKR is right we need to test if this will work in practice. In
> particular, what are the chances that network middleboxes will reject
> it? :)
OpenSSL will need a patch:
https://github.com/openssl/openssl/blob/3cfcf820bd667d0b0253dacda5af533c99f5631d/ssl/statem/extensions_srvr.c#L117-L133
I'll open an issue...
--
Viktor.
_______________________________________________
TLS mailing list -- [email protected]
To unsubscribe send an email to [email protected]