AdguardTeam / AdguardTeam/AdGuardHome

Add TLS Session Resumption Caching Support

未關閉
#5,074 1 則留言 0 個 reaction 已指派 0 人 在 GitHub 檢視
feature request
主要語言
TypeScript
星號
36.9k
分支
2.5k
PR 合併指標
30 天內沒有已合併 PR

描述

### Prerequisites

- [X] I have checked the [Wiki](https://github.com/AdguardTeam/AdGuardHome/wiki) and [Discussions](https://github.com/AdguardTeam/AdGuardHome/discussions) and found no answer

- [X] I have searched other issues and found no duplicates

- [X] I want to request a feature or enhancement and not ask a question

### Description

#### What problem are you trying to solve?

According to industry standard SSL analysis utility Qualys SSL Labs, an AdGuard Home resolver using the TLS cipher override settings:

(In order)

TLS 1.3 Ciphers:
TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256

TLS 1.2 Ciphers:
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

Will be capped at rank A due to missing support for Session Resumption Caching, despite supporting Session Resumption Tickets already.

The cipher override settings used above are to uncap the rank from B due to having two WEAK ranked TLS ciphers in the default cipher config.

#### Proposed solution

Add support for Session Resumption Caching

#### Alternatives considered

N/A

#### Additional information

N/A

貢獻指南

開啟貢獻指南

評估

這個 Issue 還沒有評估資料。

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。