Joe Birr-Pixton

> * `pki_types::UnixTime` will need to gain a constructor so that `no_std` users can implement the `GetCurrentTime` trait I think this exists and is `UnixTime::since_unix_epoch(core::time::Duration)`

Could you post a repro case? Have you adjust the constants commented `estimate where these messages appear in the server's first flight.` in the test runner? The `TLS13_AES_128_GCM_SHA256` suite will...

> aws-lc-rs has an API that we are looking to get merged into our main branch relatively soon Thanks! Using that I have some prototype-level code that successfully talks to...

I think it might be more fruitful to report this at https://github.com/aws/aws-lc-rs There is also similar reports in the bindgen repo https://github.com/rust-lang/rust-bindgen/discussions/2401

I quite like reexports, and think they work well if - used sparingly, - they're dependencies that are absolutely required for 99% of uses of the "primary" crate. I think...

> I have some initial thoughts but I'll hold off until the general idea of trying to handle one `UnbufferedStatus` per call to `process_new_packets` is confirmed as sensible - it...

This would happen if you attempt to get two TLS clients to talk to each other; including if you point a TLS client at a TCP echo server.

How about doing `process_new_packets` inside `ClientConnection::new`? That would maintain the invariant that a client starts out life with something to send.

I think I'm in agreement that we should do this, though probably in the next release rather than this one. Another rough plan to add to those above: - turn...

> It's really the equivalent of the OpenSSL "d2i_SSL_SESSION" and "i2d_SSL_SESSION" functionality I'm asking about here. Transferring the data/file descriptors between processes is something we'd handle, it just needs a...