-
Notifications
You must be signed in to change notification settings - Fork 605
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Prefer
supported_groups
extension in kx group choice
Prior to this, we preferred to avoid a `HelloRetryRequest` when any supported `KeyShare` was supplied. But as [1] describes, this means a client which sends a `KeyShare` for a less-preferred group would end up using that, rather than a more-preferred group supported by both peers. [1]: https://www.ietf.org/archive/id/draft-davidben-tls-key-share-prediction-00.html#name-downgrades
- Loading branch information
Showing
2 changed files
with
142 additions
and
61 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters