crypto/tls: Vet interaction between ECH and PSK

Open cjpatton opened this issue 4 years ago • 1 comments

We may have a bug in crypto/tls that would be triggered by ECH rejection when the server supports PSK. The bug would cause the handshake to fail. I will investigate soon, unless someone gets there first. The temporary fix should be as simple as disabling ECH+PSK. It's likely that the spec will be changed in a way that allows us to properly patch this problem without a major refactor. See https://github.com/tlswg/draft-ietf-tls-esni/issues/399.

Apr 01 '21 23:04 cjpatton

This will be fixed in draft 11 by https://github.com/tlswg/draft-ietf-tls-esni/pull/420.

Apr 19 '21 15:04 cjpatton