Playing with kernel TLS in Linux 4.13 and Go
https://blog.filippo.io/playing-with-kernel-tls-in-linux-4-13-and-go/ Linux 4.13 introduces support for nothing less than… TLS! The 1600 LoC patch allows userspace to pass the kernel the encryption keys for an established connection, making encryption happen transparently inside the kernel. The only ciphersuite supported is AES-128-GCM as per RFC 5288. The kernel only handles the record layer, that is, it only takes care →