Re: [TLS] Unifying tickets and sessions

[Richard Fussenegger <[e-mail]>]

On 10/24/2014 12:58 AM, Viktor Dukhovni wrote:
> On Fri, Oct 24, 2014 at 12:38:52AM +0200, Richard Fussenegger wrote:
>
>> With N = 2 your tickets are either T or 2 * T, depending on the time the
>> client received the ticket. The client sends the ticket to the server
>> expecting to continue were it left of but instead ends up with a full new
>> handshake because the ticket is rejected, although the lifetime indicates
>> that it's valid. (Of course no big deal.)
> This is not true, I only promise the client a lifetime of T, so
> the client asks for a new session after T anyway.  And the time
> the ticket is good for is not discrete, it varies uniformly between
> T and 2*T.

Ah, of course if you advertise T then everything is alright. I got you 
wrong there.

>> With N = 3 your ticket is always 2 * T, no matter when the client received
>> the ticket.
> Not true, it varies uniformly between 2*T and 3*T.  The client
> lifetime hint should be 2*T in this case.
>

Yap, 2 * T for the lifetime in case of N = 3.

Richard