[gnutls-devel] GnuTLS | WIP: add support for 0-RTT (!775)

[Development of GNU's TLS library]

Daiki Ueno commented on a discussion on doc/cha-gtls-app.texi:

> +
> +    ret = gnutls_record_recv_early_data(session, buffer, sizeof(buffer));
> +    assert(ret >= 0);
> +
> +    ...
> +
> +    return ret;
> +@}
> +
> +int main()
> +@{
> +  ...
> +
> +  gnutls_handshake_set_hook_function(server, GNUTLS_HANDSHAKE_END_OF_EARLY_DATA,
> +                                     GNUTLS_HOOK_POST, handshake_hook_func);
> +  ...

Those points sound reasonable to me.  To provide an easy to use API while giving the user an opportunity to control the behavior, I would propose something like:
- keep the `gnutls_record_{send,recv}_early_data` functions for stricter use cases
- add new flags to `gnutls_record_{send,recv}2` which indicate automatic use of 0-RTT, say `GNUTLS_RECORD_FLAGS_USE_EARLY_DATA`

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/merge_requests/775#note_110688652
You're receiving this email because of your account on gitlab.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20181022/6197fe99/attachment-0001.html>