Elektrine lite

← Feed

@sophieschmieg@infosec.exchange

2026-09-18 17:25 UTC

Most recent context: https://github.com/golang/go/issues/80573 But generally, middle boxes that try to parse ClientHello while not following the corresponding RFCs and then dying are a constant scourge on the internet. Leave the ClientHello alone, it's not for you, if it was for you, you wouldn't be a middle box, but a server.

Replies (1)

  • @durumcrustulum@ioc.exchange 2026-09-18 18:03

    @sophieschmieg@infosec.exchange we should go non-hybrid ML-KEM* plus ML-DSA** to avoid overflowing the ~1400 byte MTU!! * maybe not 1024 ** maybe not above 44

    Open ##4753697