3 commits

Author	SHA1	Message	Date
Niko Marmeladkov	4f6310c2bb	Fix PoW auth bypass: verify against issued challenge, not new one ... Store challenge from handleGetChallenge in session, then verify against it in handleSolve. Previously a fresh challenge was generated for verification, making auth trivially bypassable.	2026-06-30 13:47:17 +03:00
Niko Marmeladkov	dbb2782dd7	Fix missing ALPN NextProtos for QUIC handshake ... Add 'qcc' ALPN protocol to both ACME and insecure TLS configs. Bump golang.org/x/crypto and transitive x/ deps. Add golang.org/x/mobile for mobile client bindings.	2026-06-30 13:43:54 +03:00
Niko Marmeladkov	4f88a7eab1	Initial commit: QuiC Call server	2026-06-30 12:52:09 +03:00