> On 22 Jan 2018, at 14:05, Michael Paquier <michael.paqu...@gmail.com> wrote: > > On Mon, Jan 22, 2018 at 11:07:55AM +0100, Daniel Gustafsson wrote: >> An extensible API makes more sense than on/off (or one on/off call per >> binding). Perhaps a way to validate the contents of the list is >> required though? Or an assertion on the contents to catch errors >> during testing. > > Do you have something specific in mind?
Not really, but IIUC a bug in this code could lead to channel binding not being used for a connection even if the user wanted it (and may miss that ixt didn’t happen due to not looking at logs etc)? Considering the limited set of values (currently) it should be quite simple to check for offending entries, if there is indeed a risk of “silently” not using channel binding. cheers ./daniel