Goodmorning,
I would like to know if it is possible to add strict ALPN support to my nginx server.
By strict ALPN & SNI support I mean what is described here (https://alpaca-attack.com/):

Strinct ALPN: We recommend that the server aborts the handshake if the client sends the ALPN extension, but the list of protocols does not include a protocol supported by the server. We also recommend that the server acknowledge the ALPN extension, so the client can verify that the server supports ALPN and selected a valid protocol.

Strict SNI: We recommend that the server aborts the handshake if the client sends an SNI hostname that the server does not recognize. We also recommend that the server acknowledges the SNI hostname to the client so the client can verify that the server supports SNI and recognized the hostname.



Edited 1 time(s). Last edit at 04/14/2022 05:59AM by ivanv.