Consider using TLS-PSK instead of key+cert pair

boronine / h2tunnel

Simple Node.js ngrok alternative

MIT License

105 stars 3 forks source link

Consider using TLS-PSK instead of key+cert pair #5

Open boronine opened 2 weeks ago

boronine commented 2 weeks ago

This is a good fit for h2tunnel but we need to investigate how secure it is since it's not a popular configuration.

https://nodejs.org/api/tls.html#pre-shared-keys

The TLS-PSK implementation in OpenSSL has seen many security flaws in recent years, mostly because it is used only by a minority of applications. Please consider all alternative solutions before switching to PSK ciphers.

boronine commented 1 week ago

https://en.wikipedia.org/wiki/TLS-PSK