[gnutls-devel] GnuTLS | tls: make GNUTLS_NO_TICKETS no-op in TLS 1.3 (!1475)

[Read-only notification of GnuTLS library development activities]

Daiki Ueno commented on a discussion: https://gitlab.com/gnutls/gnutls/-/merge_requests/1475#note_790915139

> * the name that doesn't clearly signal the meaning you're proposing and

I agree.

> * the likely existing usage of disabling all resumption for unspecified reasons.

I'm skeptical about this, as:
* NO_TICKETS doesn't disable all resumption in TLS 1.2 (session ID based resumption cannot be turned off)
* resumption requires special API calls (e.g., `gnutls_session_set_data`); if the client program doesn't want resumption, it can simply skip those calls

That said, if we add a middle ground for compatibility, it would be an option to explicitly disable non-forward-secret session tickets; maybe NO_TICKETS_TLS12?

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/1475#note_790915139
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20211221/e4ccbc46/attachment.html>