Re: session resumption through new socket

2001-01-17 Thread Lutz Jaenicke
On Wed, Jan 17, 2001 at 10:54:10AM -0700, Varga, Jack wrote: > This leaves me with one last dilemna to solve. > That is, how can I use a browser to reestablish > an existing ssl session by routing through an > Internet gateway service that alters src ip/port > parameters? I do not fully unde

Re: session resumption through new socket

2001-01-17 Thread Lutz Jaenicke
On Tue, Jan 16, 2001 at 04:27:05PM -0700, Chad Woodford wrote: > > There is not relation whatsoever between the transport > > channel (TCP, hosts, > > ports or whatever) and the TLS protocol (being transported in > > the channel). > > The case you are describing is not uncommon. I have a dial

RE: session resumption through new socket

2001-01-16 Thread Chad Woodford
> There is not relation whatsoever between the transport > channel (TCP, hosts, > ports or whatever) and the TLS protocol (being transported in > the channel). > The case you are describing is not uncommon. I have a dialup > provider that > will give me a dynamic (and hence changing) IP n

Re: session resumption through new socket

2001-01-16 Thread Lutz Jaenicke
On Mon, Jan 15, 2001 at 03:12:14PM -0700, Varga, Jack wrote: > Testing my understanding here... > > Assuming session resumption is enabled on SSL server, > can a resumed session have a new client source IP and port? > > I believe I read somewhere, (EKR), that SSL assumes spoofed > source inf