AdguardTeam / AdguardTeam/AdGuardHome
Add TLS Session Resumption Caching Support
- 主要語言
- TypeScript
- 星號
- 36.9k
- 分支
- 2.5k
- PR 合併指標
- 30 天內沒有已合併 PR
描述
### Prerequisites
- [X] I have checked the [Wiki](https://github.com/AdguardTeam/AdGuardHome/wiki) and [Discussions](https://github.com/AdguardTeam/AdGuardHome/discussions) and found no answer
- [X] I have searched other issues and found no duplicates
- [X] I want to request a feature or enhancement and not ask a question
### Description
#### What problem are you trying to solve?
According to industry standard SSL analysis utility Qualys SSL Labs, an AdGuard Home resolver using the TLS cipher override settings:
(In order)
TLS 1.3 Ciphers:
TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256
TLS 1.2 Ciphers:
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
Will be capped at rank A due to missing support for Session Resumption Caching, despite supporting Session Resumption Tickets already.
The cipher override settings used above are to uncap the rank from B due to having two WEAK ranked TLS ciphers in the default cipher config.
#### Proposed solution
Add support for Session Resumption Caching
#### Alternatives considered
N/A
#### Additional information
N/A
貢獻指南
評估
這個 Issue 還沒有評估資料。