opinions about Session tickets

A. Schulze sca at andreasschulze.de
Mon Apr 11 15:17:07 UTC 2016


Maxim Dounin:

> In nginx 1.5.9 the "ssl_session_tickets" directive was added,
> which makes it possible to disable session tickets when needed.

I found these two opinions. They suggest to disable session tickets.

  - https://www.farsightsecurity.com/Blog/20151202-thall-hardening-dh-and-ecc/
  -  
https://timtaubert.de/blog/2014/11/the-sad-state-of-server-side-tls-session-resumption-implementations/

what do others think about that?
Andreas




More information about the nginx mailing list