[Webkit-unassigned] [Bug 248649] New: Session Ticket Support
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Thu Dec 1 23:20:52 PST 2022
https://bugs.webkit.org/show_bug.cgi?id=248649
Bug ID: 248649
Summary: Session Ticket Support
Product: WebKit
Version: WebKit Local Build
Hardware: Unspecified
OS: Unspecified
Status: NEW
Severity: Normal
Priority: P2
Component: Platform
Assignee: webkit-unassigned at lists.webkit.org
Reporter: info at webgift.gr
Hello,
i performed an SSL client test from here: https://www.howsmyssl.com/
The results was good instead of Session Ticket Support which is marked as improvable for both mobile and desktop.
Session tickets are a mechanism to speed up resumption of encrypted communication with a server. When a client and server first connect over TLS, they perform a complicated, time-consuming handshake. This handshake lets the client and the server communicate a shared secret (basically, a password) without exposing that secret to people tapping the line. However, it only allows the client and the specific computer that served the client communicate. Since websites can (and, often, must) serve their traffic from many physical computers, if the client disconnects and reconnects to the website, the client could connect to another machine that knew nothing about the shared secret. When that happens, the client and server have to perform the slow handshake again.
More info: https://www.howsmyssl.com/s/about.html#session-ticket-support
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20221202/49e27c98/attachment.htm>
More information about the webkit-unassigned
mailing list