Alexandr Nedvedicky

— On the schedule —

OpenSSL QUIC adventure

The client side of QUIC protocol is available since OpenSSL 3.2, server side is now part of 3.5. The OpenSSL still does not implement the full RFC 9000, so here I'd like to cover the missing pieces and known limitations, so QUIC adaptors can learned what to expect. The next part of the talk breifly compares other alternatives mainly from API point of view. It shows simple 'Hello QUIC' application using three different libraries. Final part covers OpenSSL learning experience from recent security reports. It brings some questions on how resources for server should be planned, unfortunately there are no easy answers at the moment.