René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"tls-server-end-point RFC5929 (Channel Binding) missing support","articleBody":"# Bug report\r\n\r\n### Bug description:\r\n\r\nDear @Python team,\r\n\r\nCan you add \"tls-server-end-point\" from RFC5929?\r\n- https://datatracker.ietf.org/doc/html/rfc5929\r\n\r\nLittle details, to know easily:\r\n- tls-unique for TLS =\u003c 1.2\r\n- tls-server-end-point\r\n- tls-exporter for TLS = 1.3\r\n\r\nAn announcement has been done by Slixmpp team here about the security problem:\r\n- https://blog.mathieui.net/en/slixmpp-1.8.5.html\r\n\r\nI think that you have seen the jabber.ru MITM:\r\n- https://notes.valdikss.org.ru/jabber.ru-mitm/\r\n- https://snikket.org/blog/on-the-jabber-ru-mitm/\r\n- https://www.devever.net/~hl/xmpp-incident\r\n- https://blog.jmp.chat/b/certwatch\r\n\r\nIt is needed for all SCRAM-SHA-*-PLUS (several RFCs) and specified in:\r\n- XEP-0388: Extensible SASL Profile: https://xmpp.org/extensions/xep-0388.html\r\n- XEP-0440: SASL Channel-Binding Type Capability: https://xmpp.org/extensions/xep-0440.html\r\n- XEP-0474: SASL SCRAM Downgrade Protection: https://xmpp.org/extensions/xep-0474.html\r\n- XEP-0480: SASL Upgrade Tasks: https://xmpp.org/extensions/xep-0480.html\r\n\r\nA best SCRAM SASL and Channel Binding explanation:\r\n- https://github.com/scram-sasl/info/issues/1\r\n\r\nAll links about it:\r\n- https://github.com/python/cpython/issues/115193\r\n- https://github.com/python/cpython/issues/95350\r\n- https://github.com/tlocke/scramp/issues/9\r\n- https://codeberg.org/poezio/slixmpp/issues/3498\r\n- https://github.com/python/cpython/issues/82133\r\n- https://github.com/python/cpython/issues/88068\r\n- https://github.com/python/cpython/issues/95341\r\n- https://github.com/python/cpython/pull/25255\r\n- https://github.com/python/cpython/pull/95366\r\n- https://bugs.python.org/issue37952\r\n- https://bugs.python.org/issue43902\r\n\r\ncc: @davidben, @wingel, @eighthave, @jchampio, @gst, @lowinger42, @ezio-melotti, @AlexWaygood, @njsmith, @zooba, @tlocke, @agronholm, @oberstet.\r\n\r\nThanks in advance.\r\n\r\nLinked to:\r\n- https://github.com/python/cpython/commit/d649480739dba77d9bfb1f320b52e9a838c33a05\r\n- https://github.com/python/cpython/search?q=tls-unique\r\n- https://github.com/python/cpython/search?q=tls-server-end-point\r\n- https://github.com/python/cpython/search?q=5929\r\n- https://github.com/python/cpython/search?q=tls-exporter\r\n- https://github.com/python/cpython/search?q=9266\r\n\r\n### CPython versions tested on:\r\n\r\nCPython main branch\r\n\r\n### Operating systems tested on:\r\n\r\nOther","author":{"url":"https://github.com/Neustradamus","@type":"Person","name":"Neustradamus"},"datePublished":"2024-02-09T02:03:06.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":7},"url":"https://github.com/115195/cpython/issues/115195"}