RFR: 8331682: Slow networks/Impatient clients can potentially send unencrypted TLSv1.3 alerts that won't parse on the server [v3]
Hai-May Chao
hchao at openjdk.org
Fri Sep 20 15:35:38 UTC 2024
On Thu, 19 Sep 2024 21:33:11 GMT, Artur Barashev <duke at openjdk.org> wrote:
>> https://bugs.openjdk.org/browse/JDK-8331682
>
> Artur Barashev has updated the pull request incrementally with one additional commit since the last revision:
>
> Add assertions. Add the final server wrap
The change involves handling an unusual situation, and to help with debugging, I’d like to suggest to log a message when server continues processing an unencrypted alert.
-------------
PR Comment: https://git.openjdk.org/jdk/pull/21043#issuecomment-2363999996
More information about the security-dev
mailing list