cloudflare / cloudflare/tls-tris
Support HelloRetryRequest
Open
- Dominant language
- Go
- Stars
- 300
- Forks
- 52
- PR merge metrics
- No merged PRs in 30d
Description
Currently the server just closes the connection when no supported groups are available. It should probably send a HRR in this case.
Similarly, the client (PR will be opened "soon") does not expect a HRR, it should retry the CH with appropriate changes (new keyshare for the group).
Important references:
https://tools.ietf.org/html/draft-ietf-tls-tls13-18#section-4.1.4 (Hello Retry Request)
https://tools.ietf.org/html/draft-ietf-tls-tls13-18#section-4.2.6.1 (PSK Binder)
Note: draft 22 changes the message significantly, requiring different parsing logic.
Contributor guide
Assessment
This issue has not been assessed yet.