RFC 9266: Channel Bindings for TLS 1.3 support

[Neustradamus]

Can you add the support of RFC 9266: Channel Bindings for TLS 1.3?

• https://datatracker.ietf.org/doc/html/rfc9266

Little details, to know easily:

• tls-unique for TLS =< 1.2
• tls-server-end-point
• tls-exporter for TLS = 1.3

Thanks in advance.

Linked to:

• RFC 9266: Channel Bindings for TLS 1.3 support fast_scram#9
• State of Play scram-sasl/info#1

[NelsonVides]

As stated in #2442 (comment)

I've seen the TLS 1.3 channel binding, it's on my personal task list. But first I need support for that in the underlying TLS libraries, and also, some code cleanup in MIM usage of the TLS libraries. So it'll take a while for this to be done, you don't need to remind me, I won't forget, but it won't be soon I'm afraid.

[Neustradamus]

@NelsonVides: Have you progressed on it?

[Neustradamus]

@NelsonVides: Have you progressed on it?

[Neustradamus]

Dear @esl team, have you progressed on it?

It is important for security, you can see here:

• https://notes.valdikss.org.ru/jabber.ru-mitm
• https://snikket.org/blog/on-the-jabber-ru-mitm
• https://www.devever.net/~hl/xmpp-incident

Thanks in advance.