ietf-tapswg / api-drafts

Architecture, interface, and implementation drafts for the definition of an abstract API for IETF TAPS
Other
23 stars 15 forks source link

How to set remote peer's identity or certificate #1375

Closed mwelzl closed 1 year ago

mwelzl commented 1 year ago

From the review by Paul Wouters, COMMENT part:

SecurityParameters.Set() seems to allow to set our identiy and our certificate, but not the remote peer's identity or certificate? For example, one might want to pin a remote certificate and not just rely on a WithHostname() identifier being present as subjectAltname on a certificate.