search

agronholm / anyio

High level asynchronous concurrency and networking framework that works on top of either trio or asyncio
MIT License
1.78k stars 135 forks source link

RFC 9266: Channel Bindings for TLS 1.3 support #456

Open Neustradamus opened 2 years ago

Neustradamus commented 2 years ago

Can you add the support of RFC 9266: Channel Bindings for TLS 1.3?

Little details, to know easily:

Thanks in advance.

agronholm commented 2 years ago

Seems easy enough – a few extra lines maybe, plus an added test.

agronholm commented 2 years ago

Hit a problem while testing: ValueError: 'tls-exporter' channel binding type not implemented. Are you sure Python can support this?

Neustradamus commented 2 years ago

I think that there is only the support of "tls-unique":

agronholm commented 2 years ago

That was my conclusion as well. So this can only be implemented when Python itself supports tls-exporter.

Neustradamus commented 2 years ago

@agronholm: I have done a ticket and @davidben too:

I have previously contacted @davidben about boringssl ^^

Neustradamus commented 2 years ago

@agronholm: @tiran has done it: