Development ideas

Crazy and not-so-crazy development ideas

The following is just a list of ideas. Some of them are not viable, some of them are already tracked by a CR. Feel free to chime in and discuss them on the KSSL discuss mailing list.

• KSSL for the client side
•  * This is currently not possible because of the way KSSL handles traffic. To activate KSSL processing, an app has to do bind(3SOCKET) request which is intercepted so that accept(3SOCKET) can lead to KSSL hooks being set up. The way to fix this could be new socket option + sotpi_connect() modification + mods in outgoing data path in kssl module (to initiate SSL handshake).
•  * what about client authentication via certificates ?
•  * no RFE filed yet
• per socket SSL protection ?
•  * related to the client KSSL support but might be handy for server applications as well (hence listed as separate bullet point)
•  * ala PF~_KEY
• support for more cipher suites (not only ECC but others)
• client certificate verification