Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-77783

QtNetwork: Channel binding support

XMLWordPrintable

    • Icon: Suggestion Suggestion
    • Resolution: Unresolved
    • Icon: P2: Important P2: Important
    • None
    • 5.9.9, 5.12.12, 5.15.14, 5.15.15, 5.15.16, 5.15.17, 5.15.18, 5.15.19, 6.0.0, 6.1.3, 6.2.6, 6.3.2, 6.4.3, 6.5.3, 6.5.4, 6.5.5, 6.5.6, 6.5.7, 6.5.8, 6.6.0, 6.7.0, 6.7.1, 6.7.2, 6.7.3, Some future release
    • Network: SSL
    • None
    • 13
    • Foundation PM Prioritized

      To have a better security, can you add Channel Binding support?

      Channel Binding works with:

      • tls-unique for TLS =< 1.2
      • tls-server-end-point
      • tls-exporter for TLS = 1.3

      All Channel Binding parts are in RFC5929/RFC9266.

      It is the -PLUS variant of different SCRAM-SHA-X

      After links to RFC, XEP, etc.

      ---------------------------

      A little part:
      to get data required for channel binding QSslSocket should have API to get data from SSL_get_finished()

      https://paquier.xyz/postgresql-2/channel-binding-openssl/

      ----------------------

      You can see a not-complete list of supported softwares:

      Several Qt projects are waiting since a very long time the solution from Qt.

      --------------------------

      With the recent jabber.ru MITM, it is important to add Channel Binding.

      Microsoft uses Channel Binding
      OpenSSL has functions
      GnuTLS has functions
      PostegreSQL uses it
      OpenLDAP uses it
      GSASL uses it
      etc.

      ------------------------------

      Linked to:

      SCRAM in RFC:

      Drafts:

      Jabber.ru MITM:

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

            manordheim Mårten Nordheim
            neustradamus Neustradamus
            Vladimir Minenko Vladimir Minenko
            Alex Blasche Alex Blasche
            Votes:
            4 Vote for this issue
            Watchers:
            9 Start watching this issue

              Created:
              Updated:

                There are no open Gerrit changes