RFC 9266: Channel Bindings for TLS 1.3 support about fast_scram HOT 2 OPEN

Dear @esl team, have you progressed on it?

It is important for security, you can see here:

• https://notes.valdikss.org.ru/jabber.ru-mitm
• https://snikket.org/blog/on-the-jabber-ru-mitm
• https://www.devever.net/~hl/xmpp-incident

Thanks in advance.

from fast_scram.

Dear @esl team, have you progressed on it?

It is important for security, you can see here:

* https://notes.valdikss.org.ru/jabber.ru-mitm

* https://snikket.org/blog/on-the-jabber-ru-mitm

* https://www.devever.net/~hl/xmpp-incident

Thanks in advance.

Hi @Neustradamus, thanks a lot for these news, they are very important. The difficulty is that to build channel binding, we need support from the underlying TLS libraries to expose the right keys, so it'll take a while, I need to verify such TLS libraries. Nevertheless, raising the priority of this issue in our internal backlog.

from fast_scram.