Skip to content
This repository has been archived by the owner on Nov 30, 2021. It is now read-only.

SSL Session Ticket Rotation #4182

Closed
croemmich opened this issue Aug 3, 2015 · 3 comments
Closed

SSL Session Ticket Rotation #4182

croemmich opened this issue Aug 3, 2015 · 3 comments
Labels
router security

Comments

@croemmich
Copy link
Contributor

Currently Deis enables SSL session tickets by default, however routers do not share the same keys, which somewhat defeats the point. We should share ticket keys between routers and rotate them frequently. See the discussion in #3915.
@croemmich croemmich mentioned this issue Aug 3, 2015
Merged
@mboersma mboersma added this to the v1.10 milestone Aug 5, 2015
@mboersma mboersma added the router label Aug 5, 2015
@mboersma
Copy link
Member

@croemmich this is an important feature to finish out the great improvements in #3915. Is periodically rotating the SSL session tickets something you plan to work on, or should we try to tackle this? (And thanks again for making Deis better!)

@croemmich
Copy link
Contributor Author

@mboersma I don't think I'll be able to work on this for at least two weeks. If the Deis teams wants to grab it sooner, by all means!

@carmstrong carmstrong modified the milestone: v1.10 Aug 24, 2015
@bacongobbler
Copy link
Member

This is not something we'll be able to get to for the LTS release (#4776) and the architecture in deis v2 has dramatically changed such that this is no longer relevant so I'm closing this. Thanks @croemmich!

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
router security
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@mboersma @croemmich @carmstrong @bacongobbler