Expand description
TLS material for the QUIC transport.
QUIC requires TLS 1.3. The Confium transport is intentionally
transport-unauthenticated — TC sessions sign every round message at
the application layer (see TODO.roadmap/05-networking-primitives.md,
“Application-layer signatures”). To keep the transport usable without
a real PKI, this module generates a fresh self-signed certificate per
process and configures clients to accept any server certificate.
The certificate / key live only in memory; they are never persisted.