ok2c commented on PR #519:
URL: 
https://github.com/apache/httpcomponents-core/pull/519#issuecomment-2903675568

   > @ok2c thanks for the deep dive—if I’m reading this right, 
`InternalDataChannel` permanently locks in TLS on the first handshake, so you 
simply can’t layer a second one on the same connection. Is there something I’m 
overlooking, or any other angle I should try?
   
   @arturobernalg I consciously introduced this limitation at the very 
beginning of HttpCore 5.0 development to reduce complexity in the TLS layer. I 
never expected the multiple TLS session layering to apply to our problem 
domain. That turned out wrong. However, it proxy tunneling over HTTPS is not 
particularly useful or common and I see no point fixing this limitation at this 
moment. This is a high effort - low reward problem. There are more important 
things to be done. Besides, if we want TLS layering (and other advanced things) 
we _might_ need to consider dropping HttpCore in favor of Netty instead.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@hc.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@hc.apache.org
For additional commands, e-mail: dev-h...@hc.apache.org

Reply via email to