They key phrase is "rely upon", meaning they went down a route of using a clever hack rather than formally designing a system to meet their goals.
I wonder why SOCKs proxies, which every browser supports, wouldn't work for them.
I wonder why SOCKs proxies, which every browser supports, wouldn't work for them.
And exactly as expected, they have a MSFT stack so they're wedged and think changing the spec is the right way to solve it. Sigh.
> With TLS 1.2 we can ask the end user to take a Wireshark trace and then decrypt it with the RSA private key. With TLS 1.3 we will have to rely on the SSLKEYLOGFILE feature in Firefox and Chrome, so we want it to be available. Unfortunately, Microsoft does not allow this functionality, which is a problem in a TLS 1.3 only environment.