Re: [TLS] SSL session caching & lookups

[Martin Rex <Martin.Rex@xxxxxxx>]

Nagendra Modadugu wrote:
> 
> NSS clients currently only attempt to resume a session if the
> following fields match:
> * server IP
> * server Port
> * server hostname

That are the three parameters that we use in our clients in order
to try an SSL session resume.  When client-side Proxies are involved,
then the server IP alone is insufficient (it would be fairly constant).

>
> * session ID

I don't know what you mean by listing "session ID".
An SSL session resume can only be proposed by a client, not by the
server.  The server can only agree to resume.  So the above three
parameters are the lookup key into the client side SSL session
cache -- the session ID is an attribute of the session itself.


-Martin
_______________________________________________
TLS mailing list
TLS@xxxxxxxx
http://www.ietf.org/mailman/listinfo/tls