On Wed, Jan 06, 2016 at 06:21:13AM +0000, Viktor Dukhovni wrote:
> On Tue, Jan 05, 2016 at 02:44:32PM -0800, Zi Lin wrote:
> 
> > Hi OpenSSL devs,
> > 
> > I want to propose a patch that makes OpenSSL compatible with
> > asynchronous session lookup during session resumption.
> 
> I think this is a bad idea.  If you want distributed session caches
> use session tickets,

That's not really a solution if the client doesn't support session tickets at
all. So in those cases you are left with doing no resumption or doing it
synchronously with session id in an inefficient way.

I think that with the new state machine in master this could be implemented
fairly elegantly and since there's an interest from OpenSSL users (even
BoringSSL provides this!) it seems like something worth implementing to me.

Cheers

Attachment: signature.asc
Description: PGP signature

_______________________________________________
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Reply via email to