The spec allows client and server to enter TLS mode via a StartTLS option. We might consider supporting this, though a natural API for that is tricky, especially if we want to support features such as selective TLS. It's also an open question how the client can pass an encrypted connection to the kernel.
- NBD_OPT_STARTTLS
- NBD_REP_ERR_TLS_REQD
The spec allows client and server to enter TLS mode via a StartTLS option. We might consider supporting this, though a natural API for that is tricky, especially if we want to support features such as selective TLS. It's also an open question how the client can pass an encrypted connection to the kernel.