Re: [TLS] Removing the "hint" from the Session Ticket Lifetime hint

Martin Thomson <martin.thomson@gmail.com> Tue, 23 February 2016 18:54 UTC

MIME-Version: 1.0
In-Reply-To: <56CCA853.4070601@akamai.com>
References: <CAFDDyk_dFOwv=GiQY7FdPqVcBR2ynN1fg0FzU8LeiYVDFPgArQ@mail.gmail.com> <56CCA853.4070601@akamai.com>
Date: Tue, 23 Feb 2016 10:54:48 -0800
Message-ID: <CABkgnnW_cTaVmE0Tf1vSFA-s8t-reqCYkvoVFzuckn3AuGfjHQ@mail.gmail.com>
From: Martin Thomson <martin.thomson@gmail.com>
To: Benjamin Kaduk <bkaduk@akamai.com>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <http://mailarchive.ietf.org/arch/msg/tls/02hY5borAUkUkNqvi9riSdix2vg>
Cc: "tls@ietf.org" <tls@ietf.org>
Subject: Re: [TLS] Removing the "hint" from the Session Ticket Lifetime hint
Precedence: list

On 23 February 2016 at 10:43, Benjamin Kaduk <bkaduk@akamai.com> wrote:
> But leave it as a relative time, contrasting the absolute expiration time of
> the server configuration -- why not go for full-out parallelism?

As I have said before, the value of absolute time here is that it
allows for the use of server configuration outside of the context of
the TLS 1.3 handshake.  Given that we are now seriously discussing
removing ServerConfiguration from TLS 1.3, this is probably moot.

[TLS] Removing the "hint" from the Session Ticket… Nick Sullivan
Re: [TLS] Removing the "hint" from the Session Ti… Benjamin Kaduk
Re: [TLS] Removing the "hint" from the Session Ti… Subodh Iyengar
Re: [TLS] Removing the "hint" from the Session Ti… Martin Thomson
Re: [TLS] Removing the "hint" from the Session Ti… Russ Housley
Re: [TLS] Removing the "hint" from the Session Ti… Salz, Rich
Re: [TLS] Removing the "hint" from the Session Ti… Martin Rex
Re: [TLS] Removing the "hint" from the Session Ti… Salz, Rich
Re: [TLS] Removing the "hint" from the Session Ti… Viktor Dukhovni
Re: [TLS] Removing the "hint" from the Session Ti… Subodh Iyengar