zlabjp / nghttpx-ingress-lb

nghttpx ingress controller for Kubernetes
Other
136 stars 12 forks source link

Revise QUIC keying materials in backward incompatible way #299

Closed tatsuhiro-t closed 8 months ago

tatsuhiro-t commented 8 months ago

Now new key is placed at the end of QUIC keying materials. It is not used for encryption immediately, and starts encrypting data on the next rotation, as we did for TLS ticket key. This is a backward incompatible change. There is no migration from the previous release because HTTP/3 is experimental.