Comments (3)
marten-seemann
commented on August 20, 2024
Currently clients are expected to trust any root. What would be the advantage of validating the certificate?
from quic-interop-runner.
camshaft
commented on August 20, 2024
It would be a minor improvement to specify the CA so the client is configured more closely to how it will be used in production environments. It would also allow for a test that fails the handshake if the CA isn't trusted.
If you don't see there being a ton of value in that, I think that's fine too, but we should probably document the expectation for clients to trust any root. I can open a PR for that if we want to go that direction.
from quic-interop-runner.
janaiyengar
commented on August 20, 2024
I don't think that's a QUIC-specific issue, since cert validation would be part of the TLS scaffolding that QUIC uses, and so the value is really not high. This also is not what implementations do right now, so I would be very disinclined to adding it.
from quic-interop-runner.
Related Issues (20)
- Q/A: Please share commands used internally HOT 4
- docker pulling s2n-quic regularly fails HOT 6
- consider removing quant HOT 3
- move repo to a separate GitHub org HOT 4
- Need to update Wireshark/TShark cache version HOT 2
- key update test seems broken
- docker pull for nginx is failing the build: AWS container registry HOT 2
- Drop implementations that haven't been updated HOT 5
- xquic is taking >8h to run tests
- Add option to generate Markdown `prettytable`s
- ECN test shouldn't be counting marks from packets that cannot be decrypted HOT 2
- Everyone fails the amplification test at the moment? HOT 1
- "This event loop is already running" HOT 2
- What role does the VERSION environment variable play in the tests? HOT 6
- Automatically mark as unsupported HOT 5
- Test results exported to result.json don't map to the correct server/client HOT 2
- feature request: add openssl quic (openssl 3.2+) HOT 1
- EIO on sendmsg with GSO HOT 2
- zerortt test counts 1-RTT traffic from first connection HOT 2
- No pcaps when platforms don't match
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from quic-interop-runner.