New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Consider using TLS-PSK instead of key+cert pair #5

Open

boronine opened this issue Oct 28, 2024 · 1 comment

Assignees

Owner

boronine commented Oct 28, 2024 •

edited

Loading

This is a good fit for h2tunnel but we need to investigate how secure it is since it's not a popular configuration.

https://nodejs.org/api/tls.html#pre-shared-keys

The TLS-PSK implementation in OpenSSL has seen many security flaws in recent years, mostly because it is used only by a minority of applications. Please consider all alternative solutions before switching to PSK ciphers.

Owner Author

boronine commented Nov 4, 2024

https://en.wikipedia.org/wiki/TLS-PSK

boronine self-assigned this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment