1/ TLS1.3 isn't stalled on this, but on other broken middle-boxes. Thread mostly just a minor nuisance afaics.
Seems insane on two fronts: 1/ It's incompatible with a best practice for resume: negotiate as normal and only resume if all params match.
-
-
That avoids attacks where the attacker controls the servers choices by swapping tickets. Also means new alg priorities take.
-
2/ makes an even worse mockery of the pro-FS factions, huge *huge* inconsistencies!
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.