Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-77783

QtNetwork: Channel binding support

    XMLWordPrintable

Details

    • Suggestion
    • Resolution: Unresolved
    • P2: Important
    • None
    • 5.9.9, 5.12.12, 5.15.14, 5.15.15, 5.15.16, 5.15.17, 5.15.18, 5.15.19, 6.0.0, 6.1.3, 6.2.6, 6.3.2, 6.4.3, 6.5.3, 6.5.4, 6.5.5, 6.5.6, 6.5.7, 6.5.8, 6.6.0, 6.7.0, 6.7.1, 6.7.2, 6.7.3, Some future release
    • Network: SSL
    • None
    • 13
    • Foundation PM Prioritized

    Description

      To have a better security, can you add Channel Binding support?

      Channel Binding works with:

      • tls-unique for TLS =< 1.2
      • tls-server-end-point
      • tls-exporter for TLS = 1.3

      All Channel Binding parts are in RFC5929/RFC9266.

      It is the -PLUS variant of different SCRAM-SHA-X

      After links to RFC, XEP, etc.

      ---------------------------

      A little part:
      to get data required for channel binding QSslSocket should have API to get data from SSL_get_finished()

      https://paquier.xyz/postgresql-2/channel-binding-openssl/

      ----------------------

      You can see a not-complete list of supported softwares:

      Several Qt projects are waiting since a very long time the solution from Qt.

      --------------------------

      With the recent jabber.ru MITM, it is important to add Channel Binding.

      Microsoft uses Channel Binding
      OpenSSL has functions
      GnuTLS has functions
      PostegreSQL uses it
      OpenLDAP uses it
      GSASL uses it
      etc.

      ------------------------------

      Linked to:

      SCRAM in RFC:

      Drafts:

      Jabber.ru MITM:

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            manordheim MÃ¥rten Nordheim
            neustradamus Neustradamus
            Vladimir Minenko Vladimir Minenko
            Alex Blasche Alex Blasche
            Votes:
            4 Vote for this issue
            Watchers:
            9 Start watching this issue

            Dates

              Created:
              Updated:

              Gerrit Reviews

                There are no open Gerrit changes