Mailing List Archive

[Bug 66199] RFC 9266: Channel Bindings for TLS 1.3 support
https://bz.apache.org/bugzilla/show_bug.cgi?id=66199

Neustradamus <Neustradamus@hotmail.com> changed:

What |Removed |Added
----------------------------------------------------------------------------
CC| |Neustradamus@hotmail.com

--- Comment #4 from Neustradamus <Neustradamus@hotmail.com> ---
I think that you have seen the jabber.ru MITM and Channel Binding is the
solution:
- https://notes.valdikss.org.ru/jabber.ru-mitm/
- https://snikket.org/blog/on-the-jabber-ru-mitm/
- https://www.devever.net/~hl/xmpp-incident
- https://blog.jmp.chat/b/certwatch

Little details, to know easily:
- tls-unique for TLS =< 1.2
- tls-server-end-point
- tls-exporter for TLS = 1.3

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org