tlswg / tls13-spec

TLS 1.3 Specification
563 stars 159 forks source link

(Lack of) justification for separate API for early exporter #1180

Closed kaduk closed 6 years ago

kaduk commented 6 years ago

We currently have

A separate interface for the early exporter is RECOMMENDED, especially on a server where a single interface can make the early exporter inaccessible.

which is a little confusing, since it doesn't note that the server has the non-early exporter available once it has generated its first flight, and doubly so since the actual motivation for separate interfaces is for security reasons of not accidentally using the early exporter when the main one is needed.

(Split out from #1166)