TLS session resumption (identifier)
reallfqq-nginx at yahoo.fr
Thu Mar 3 15:42:19 UTC 2016
You were right: I did my tests improperly...
What is the use of the 'none' value then? Should not there be only the
There must be some benefit to it, but I fail to catch it.
On Thu, Mar 3, 2016 at 2:29 PM, Maxim Dounin <mdounin at mdounin.ru> wrote:
> On Thu, Mar 03, 2016 at 12:42:55PM +0100, B.R. wrote:
> > Based on the default value of ssl_session_cache
> > <
> > nginx does not store any session parameter, but allows client with the
> > right Master Key to reuse their ID (and the parameters they got).
> > Since nginx, does not cache anything and is thus unable to revalidate
> > anything but the Master Key, isn't it a violation of the RFC not to
> > validate all the parameters?
> You are misunderstanding what "ssl_session_cache none" does. It
> doesn't allow anything to be reused, just says so to clients.
> Maxim Dounin
> nginx mailing list
> nginx at nginx.org
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the nginx