FS is relative to the secret (STEK vs Privkey). In non-DH resumption, the entire resumed connection is not FS wrt STEK, not just 0-RTT data
Agreed it could actually be "Clearly we don't care about FS that much at all" :) Though I still think 0-RTT is the bigger real world problem
-
-
Let’s check back on this when server deployment is high enough that you can measure the % of 0-RTT vs the % of non-FS resumption support.
-
I smell an IMC paper for
@_aaspring_ and@zakirbpd
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.