cloudflare / cloudflare/pingora

Contributing new TLS implementation (s2n-tls)

Open
#607 6 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Rust
Stars
27.4k
Forks
1.7k
Avg merge
6h 22m
Merged PRs (30d)
3

Description

Would you be open to accepting a contribution of a new TLS implementation to go alongside openssl / boring / rustls? It seems that user of Pingora can not presently provide their own implementation, despite it being mostly pluggable already because of this: https://github.com/cloudflare/pingora/blob/128aafe4ce8d84a1d768277a5f4aaf635aa25fae/pingora-core/src/protocols/tls/mod.rs

I am interested in s2n support because of its focus on security, especially its design focus on blinding side-channels.

It would be great to understand if you'd be open to such a contribution and/or making the TLS implementation truly pluggable before I go too much further down the path of this experiment.

Thanks.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.