On 05.04.2017 16:46, Tobias Markmann wrote: > As a side note, requiring access to channel binding data, will > disqualify some deployment environments. AFAIK standard Java APIs have > no way to access channel binding data of TLS connections. Maybe > bouncycastle can, though.
The channel binding type tls-server-end-point is trivial to implement on Android and Java (without resorting to bouncycastle or the like), and I think most TLS APIs of other languages. That's why the ISR SASL family makes only that mechanism flavour mandatory to implement. - Florian
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Standards mailing list Info: https://mail.jabber.org/mailman/listinfo/standards Unsubscribe: [email protected] _______________________________________________
