René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"ssl module incorrectly supports tls-unique channel binding for TLS 1.3","articleBody":"CPython's `get_channel_binding` method implements the tls-unique channel binding for TLS 1.3:\r\nhttps://github.com/python/cpython/blob/main/Lib/test/test_ssl.py#L671-L681\r\nhttps://github.com/python/cpython/blob/main/Modules/_ssl.c#L2705\r\n\r\nBut this is incorrect. tls-unique is vulnerable to a couple of attacks ([3SHAKE](https://www.mitls.org/pages/attacks/3SHAKE), [SLOTH](https://www.mitls.org/pages/attacks/SLOTH)), so it was [left undefined](https://datatracker.ietf.org/doc/html/rfc8446#appendix-C.5) in TLS 1.3. [RFC 9266](https://datatracker.ietf.org/doc/html/rfc9266) defines a replacement tls-exporter binding, built with Export Keying Material instead.","author":{"url":"https://github.com/davidben","@type":"Person","name":"davidben"},"datePublished":"2022-07-27T18:10:46.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":12},"url":"https://github.com/95341/cpython/issues/95341"}