Adam Langley's Pond: Secure Async Messaging

Re:Adam Langley's Pond: Secure Async Messaging by agl on Saturday July 13, 2013 @11:48PM (#6039863)

Good to know. I knew that I needed to do it, but I'll be sure to add support for this prior to Go 1.2.

(The TLS stack doesn't support renegotiation at all, so it's not vulnerable, but a client can't know that unless it echos the extension in question.)

[ Parent | on HN ]

Re:Adam Langley's Pond: Secure Async Messaging by agwa on Sunday July 14, 2013 @12:09AM (#6039913)

Ah, you're using the Go TLS package? That makes sense ;-).

As it turns out the latest version of Firefox still connects to servers which don't indicate secure renegotiation; the parent poster caused the problem by mucking around with the TLS settings in about:config.

[ Parent | on HN ]

Re:Adam Langley's Pond: Secure Async Messaging by nitrogen on Sunday July 14, 2013 @06:34AM (#6040521)

Well, it looks like he wrote the Go TLS package.

[ Parent | on HN ]