Exporter length

[ekr]

Hugo writes
"​This is unrelated to the issue​s​ raised by Douglas, but if the exporter key is intended for use as a unique session identifier ​(or ​a sort of "channel binding") then calling it a "key" is misleading. For example, while a key of 128 bits is perfectly fine (e.g. for AES-128), such length is insufficient as a channel binding string (where resistance to birthday attacks seems necessary). I do not see a note on this in the TLS document or RFC 5705."