Christian Heimes

Then trust the experts. :) The X.690 standard specifies ASN.1 encodings, among others Distinguished Encoding Rules (DER). X.509 certificates use ASN.1 DER. DER requires that SET elements are ordered in...

> For example, if a certificate chain is: > > ``` > `???` > `intermediate_1` > `intermediate_2` >`certificate` > ``` Pet peeve: The term "certificate chain" is an oversimplification and...

The channel binding can be implemented with [SSL_export_keying_material](https://www.openssl.org/docs/man1.1.1/man3/SSL_export_keying_material.html). It is mostly trivial except for two facts: - You have to use an empty context. TLS 1.2 creates different keying material...

You still need ``SSL_CTRL_GET_EXTMS_SUPPORT`` in order to check for EMS when the connection uses TLS 1.2. > This channel binding mechanism is defined only when the TLS handshake > results...

FYI, you can already set the security level with ``SSL_CTX_set_cipher_list``, e.g. ``"@SECLEVEL=1:DEFAULT"``.

> Support for accepting buffers as arguments with abi3 Are you referring to `Py_buffer``? They are currently excluded from stable API. I created https://bugs.python.org/issue45459 a month ago to include them.

I made an experimental PR that adds a heap-allocated ``Py_buffer *`` API to Python. The strides/shapes parts are bit a tricky, though. Antoine argues that ``Py_buffer`` is mature and stable...

There have been several EMSDK releases since the PR was created. Could you try 3.1.18? It has 64bit time_t.

> Sounds good. This only applies to major Python versions, not minor ones, right? > Yes. We could update the minor Python version more frequently if we choose to. Naming...

Emscripten 3.1.15 and newer come with sqlite3 in emports, `-sUSE_SQLITE3`.