Bug 248648
| Summary: | Session Ticket Support | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Stavros <info> |
| Component: | Platform | Assignee: | Nobody <webkit-unassigned> |
| Status: | NEW | ||
| Severity: | Normal | CC: | achristensen, webkit-bug-importer |
| Priority: | P2 | Keywords: | InRadar |
| Version: | WebKit Local Build | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
Stavros
Hello,
i performed an SSL client test from here: https://www.howsmyssl.com/
The results was good instead of Session Ticket Support which is marked as improvable for both mobile and desktop.
Session tickets are a mechanism to speed up resumption of encrypted communication with a server. When a client and server first connect over TLS, they perform a complicated, time-consuming handshake. This handshake lets the client and the server communicate a shared secret (basically, a password) without exposing that secret to people tapping the line. However, it only allows the client and the specific computer that served the client communicate. Since websites can (and, often, must) serve their traffic from many physical computers, if the client disconnects and reconnects to the website, the client could connect to another machine that knew nothing about the shared secret. When that happens, the client and server have to perform the slow handshake again.
More info: https://www.howsmyssl.com/s/about.html#session-ticket-support
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Sam Sneddon [:gsnedders]
*** Bug 248649 has been marked as a duplicate of this bug. ***
Radar WebKit Bug Importer
<rdar://problem/103169639>