search

bifurcation / mint

A Minimal TLS 1.3 Implementation in Go
MIT License
225 stars 36 forks source link

Fall back to non-PSK if no shared PSK ciphers #50

Closed grittygrease closed 8 years ago

yaronf commented 8 years ago

Hi Nick, I don't see a use case where this would make sense. If client and server have a PSK, they surely want mutual authentication even if the server happens to have a cert.

grittygrease commented 8 years ago

The use case is if the client is sending a valid session ticket in a resumption but the client and server don't share the same PSK ciphersuites: then you have to fall back to a regular non-resumption handshake.

yaronf commented 8 years ago

Agree. Thanks.