Re: SSLSession invalidate

2011-09-15 Thread Henry Story
You can break TLS sessions once you have the session_id. I tried this in Clerezza (an apache incubator project) to see if I could get something like a logout functionality to work. I even tried to see if breaking a connection and throwing one of the exceptions that TLS defines would force the

Re: SSLSession invalidate

2011-09-15 Thread Henry Story
as the application to which then one sends an ssl logout signal. A browser plugin references the https uri of the image. Does the cache release the image, collected over a session that is now closed? Sent from my iPhone On Sep 15, 2011, at 1:23 AM, Henry Story henry.st...@bblfish.net wrote: You can