Re: [TLS] Justification

[Nicolas Williams <[e-mail]>]

On Wed, May 12, 2010 at 11:59:38AM -0500, Marsh Ray wrote:
> Come to think of it, that may be the best argument of all in favor of a
> strong hash function: it enables the cache to be kept for arbitrary
> lengths of time without special protections or serious security
> considerations.

It's not the only solution that does.  I just proposed using URLs to
name cacheable objects.  Objects at any URLs would never change; to
change the object you'd change the URL.

The key to making the protocol secure is to add the cached objects as
extra inputs to the Finished message computation.