[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[TLS] SSL session caching & lookups

I'd like to get some implementation advice about a matter that is not
covered in the spec.

NSS clients currently only attempt to resume a session if the
following fields match:
* server IP
* server Port
* session ID
* server hostname

Looking up sessions in this manner means that dns-load-balancing
breaks SSL resumes.  Is there a case for checking server IP and port?

nagendra
_______________________________________________
TLS mailing list
TLS@xxxxxxxx
http://www.ietf.org/mailman/listinfo/tls