11 Jan
2024
11 Jan
'24
5:39 a.m.
* Simon Josefsson <simon(a)josefsson.org> [2024-01-11 13:10]:
I believe tls-server-end-point is generally best left
unimplemented to
guide efforts towards supporting the stronger tls-exporter.
One use case I see for tls-server-end-point is that it allows for
supporting channel binding by setups where TLS is terminated by some
reverse proxy, thereby protecting against _some_ but not all attack
vectors that tls-exporter protects against.
Holger