Skip to content

Conversation

@ameba23
Copy link
Collaborator

@ameba23 ameba23 commented Jan 9, 2026

This separates out attested TLS from the https proxy, allowing it to be used for other projects and use cases.

Currently it still assumes TCP - so is not fully transport agnostic and cannot be used for UDP based transports such as QUIC. Further separation to make it more flexible in this regard could be made in a followup PR.

TODO:

  • Recreate attestation handling in a separate task (currently this gives different behavior with regards to task handling and is not purely a refactor).
  • ProxyClient should use the new refactored AttestedTlsClient

Closes #80

@ameba23 ameba23 marked this pull request as draft January 9, 2026 09:24
@ameba23 ameba23 marked this pull request as ready for review January 12, 2026 08:13
@ameba23 ameba23 merged commit 2590bd4 into main Jan 12, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Refactor to expose the attested TLS functionality separately from the HTTPS proxy functionality

1 participant