New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Forward Secrecy lost when TLS session tickets activated #21

Open

tdelmas opened this issue Jul 20, 2016 · 1 comment

Labels

engine

tdelmas commented Jul 20, 2016

According to https://wiki.mozilla.org/Security/Server_Side_TLS#TLS_tickets_.28RFC_5077.29 and https://media.blackhat.com/us-13/US-13-Daigniere-TLS-Secrets-Slides.pdf , when TLS session tickets are activated, we lose Forward Secrecy.

So I think the report should emphasis that.

rugk commented Jul 21, 2016

Another source: mozilla/server-side-tls#135

/cc @gene1wood @tomato42

aeris added the engine label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment