Re: [TLS] Comments on TLS identity protection

[Eric Rescorla <ekr@xxxxxxxxxxxxxxxxxxxx>]

"Kyle Hamilton" <aerowolf@xxxxxxxxx> writes:
> On every renegotiation, does the server have to reauthenticate itself
> (present its certificate again)?  Or can the credential on the client
> side be cached to avoid that duplication?

I don't think I understand the question.

1. You do a regular handshake with no client auth.
2. The server initiates a rehandshake with client auth. This has
   to be a full handshake with a new key exchange.

Any future resumptions of the second session can be done out
of cache.

-Ekr

_______________________________________________
TLS mailing list
TLS@xxxxxxxxxxxxxx
https://www1.ietf.org/mailman/listinfo/tls