Joe Birr-Pixton

> I imagine we'd be open to a PR that somehow constructs a `ClientConnection` or `ServerConnection` from an `ExtractedSecrets`. I don't think this is feasible. An `ExtractedSecrets` would get you...

I think this is correct behaviour. To borrow and alter a diagram from RFC8446: ``` Client Server Key ^ ClientHello Exch | + key_share* | + signature_algorithms* | + psk_key_exchange_modes*...

> 🟡 **Format** _Expected — Waiting for status to be reported_ We'd need to change the expected name of this job in the branch protection config.

Still not an opportune time to land this, but I reworked it to avoid stable `cargo fmt` seeing unstable options. Instead there's a `cargo fmt-unstable` alias which references the (separate)...

> @ctz I've reworked this branch around the [`lock_api`](https://docs.rs/lock_api/0.4.11/lock_api/) dependency you found. I think it's workable, but the generics on the [`Mutex`](https://docs.rs/lock_api/0.4.11/lock_api/struct.Mutex.html) and [`MutexGuard`](https://docs.rs/lock_api/0.4.11/lock_api/struct.MutexGuard.html) types mean it's a more invasive...

I'm going to close this. I will shortly be bringing forward a PR for this, that reuses some parts of this one. Thanks!

FWIW I am rescuing this into https://github.com/ctz/rustls-embedded-demo

> As an intermediate step it might be worthwhile to add a Go/OpenSSL server tests in CI (input here welcome!). Definitely worth looking at the boringssl test suite -- there...

> Might also be useful to do a bogo update before this work? I assume ECH tests may have evolved since June. #1740

> * on the provider-example crate to have an HPKE provider. AFAIK aws-lc-rs 1.6.0 added support needed for us to construct HPKE on top of it. I haven't gone back...