summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNikos Mavrogiannopoulos <nmav@redhat.com>2018-07-03 10:22:04 +0200
committerNikos Mavrogiannopoulos <nmav@gnutls.org>2018-07-11 15:20:28 +0000
commit9b69b3e9690021456ab1086aeb1125a9753f9ae0 (patch)
treebcde12134ce9b7fce70172a0a70cbd263788d003
parent6317bdaebfa656b90af58d121de9aae2297b4684 (diff)
downloadgnutls-9b69b3e9690021456ab1086aeb1125a9753f9ae0.tar.gz
doc: mention session ticket behavior under TLS1.3
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
-rw-r--r--doc/cha-intro-tls.texi3
1 files changed, 3 insertions, 0 deletions
diff --git a/doc/cha-intro-tls.texi b/doc/cha-intro-tls.texi
index 0c82f0853b..b95abc6b81 100644
--- a/doc/cha-intro-tls.texi
+++ b/doc/cha-intro-tls.texi
@@ -464,6 +464,9 @@ regularly.
Since version 3.1.3 GnuTLS clients transparently support session tickets,
unless forward secrecy is explicitly requested (with the PFS priority string).
+Under TLS 1.3 session tickets are mandatory for session resumption, and they
+do not share the forward secrecy concerns as with TLS 1.2 or earlier.
+
@node HeartBeat
@subsection HeartBeat
@cindex TLS extensions