1
TLS 1.2 Session Tickets
Session Tickets, specified in RFC 5077 , are a technique to resume TLS sessions by storing key material encrypted on the clients. In TLS 1.2 they speed up the handshake from two to one round-trips.
Filippo Valsorda
We now know how the seeds of the NIST elliptic curves were generated: they’re not the hash of some saucy sentence, but the output of drand48() seeded with the time, which was indeed in 1997–98.
- Popular posts
- 18
- Total points
- 4,082
- HN comments
- 1,634
- Rank
- #311 personal
Visit blog.filippo.io → RSS feedOn Hacker News Nov 2015 – Dec 2021
Security & Privacy 13Software Engineering 4Web & Frontend 2Tools & Productivity 2Systems & Performance 2Networking & Internet 2
2
The sad state of SMTP encryption
This is a quick recap of why I’m sad about SMTP encryption. It explains how TLS certificate verification in SMTP is useless even if you force it.