RFC 9266: Channel Bindings for TLS 1.3 support

cannatag / ldap3

a strictly RFC 4510 conforming LDAP V3 pure Python client. The same codebase works with Python 2. Python 3, PyPy and PyPy3

Other

873 stars 269 forks source link

RFC 9266: Channel Bindings for TLS 1.3 support #1108

Open Neustradamus opened 11 months ago

Neustradamus commented 11 months ago

Can you add the support of RFC 9266: Channel Bindings for TLS 1.3?

https://datatracker.ietf.org/doc/html/rfc9266

Little details, to know easily:

tls-unique for TLS =< 1.2
tls-server-end-point
tls-exporter for TLS = 1.3

Thanks in advance.

Linked to:

https://github.com/cannatag/ldap3/issues/1106

Neustradamus commented 7 months ago

@ThePirateWhoSmellsOfSunflowers: Can you look to have a perfect Channel Binding support?

ThePirateWhoSmellsOfSunflowers commented 7 months ago

Hello @Neustradamus,

I'm sorry but I'm mainly focused on LDAP for Active Directory (offensive security pov) and as far as i know, AD only supports tls-server-end-pointchannel binding.

:sunflower: