3 ms·
I'm very concerned by it. The day that a programmer can insert additional data as "optional fields" in TLS that can't be inspected without breaking spec? Why c
by inetknght 8y ago
I'm very concerned by it.
The day that a programmer can insert additional data as "optional fields" in TLS that can't be inspected without breaking spec? Why can't they be inspected? Because they're "unsupported"
Sounds like a great plan. Definitely a great plan. What could go wrong with clients writing out more data than they need to? What could go wrong with clients writing out "garbage data" specifically to make sure that random unsupported data is supported and "ignored"? Nothing wrong at all! /s