Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Do agents need to support the Cookies extension (used in HelloRetryRequest)? #219

Closed
mfoltzgoogle opened this issue Sep 11, 2019 · 2 comments
Closed

Do agents need to support the Cookies extension (used in HelloRetryRequest)? #219

mfoltzgoogle opened this issue Sep 11, 2019 · 2 comments
Labels
security-tracker Group bringing to attention of security, or tracked by the security Group but not needing response. v1-spec

Comments

@mfoltzgoogle
Copy link
Contributor

Do OSP agents need to support TLS cookies (used to cache renegotiation outcomes)?

It seems like there is little to renegotiate, but the TLS spec indicates it's a mandatory extension, so it might be easier to support it than turn it off.
@mfoltzgoogle mfoltzgoogle added security-tracker Group bringing to attention of security, or tracked by the security Group but not needing response. v1-spec labels Sep 11, 2019
@plehegar plehegar mentioned this issue Feb 14, 2020
Open
@mfoltzgoogle
Copy link
Contributor Author

https://www.w3.org/2019/09/15-webscreens-minutes.html#x05

ACTION: mfoltzgoogle to remove notes about the TLS profile; if you use 1.3, you can get away of specifying profile, because 1.3 gets rid of all the bad choices.

@mfoltzgoogle mfoltzgoogle mentioned this issue Feb 22, 2021
Open
15 tasks
@anssiko anssiko mentioned this issue Feb 23, 2021
Closed
2 tasks
@mfoltzgoogle mfoltzgoogle mentioned this issue Feb 23, 2021
Merged
@mfoltzgoogle
Copy link
Contributor Author

Addressed by #252.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
security-tracker Group bringing to attention of security, or tracked by the security Group but not needing response. v1-spec
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@mfoltzgoogle