Barry Bond comments

Results 18 comments of


                                            Barry Bond

miTLS server does not enforce max_early_data of a ticket properly

I'm assigning to you, to confirm this is a bug, and that it'll be addressed via verification work.

Build script fails to execute Kremlin.native

Thanks for reporting this. I do much of my development on Bash For Windows, including Vale work. The checked-in copy of Kremlin, in tools/Kremlin/Kremlin.native is indeed a PE32+ Windows binary....

Spurious use of `Sleep`?

The containing function is actually dead code. Easier fix is to delete it.

Re-ordering the "supported_versions" extension in ClientHello causes internal_error alert from the server

Can you check if this is still a bug, and whether it'll be caught/fixed during verification?

miTLS and NSS servers emit different alerts when manipulating EncryptedExtensions

Can you follow up on this bug? Please check if it is still and issue, and if it'll be caught/fixed as part of the verification push?

No alert emitted on decryption failure of server encrypted response after ServerHello

Can you check if this is still a bug, and something that'll be caught during verification?

miTLS API may confuse developers to write software which may be vulnerable to replay attacks

Let's think more about this as we tidy up the TLS interface.

Allow to configure editor auto reload behaviour

I just had data loss due to this. This would have worked in VS2017, but didn't in VSCode... I had VSCode open with a particular file open, but saved to...