Subject: [TLS] SSL session caching & lookups

From: "Nagendra Modadugu" <[email-masked]>
Date: Thu, 31 Jan 2008 18:30:44 -0800

I'd like to get some implementation advice about a matter that is not
covered in the spec.

NSS clients currently only attempt to resume a session if the
following fields match:
* server IP
* server Port
* session ID
* server hostname

Looking up sessions in this manner means that dns-load-balancing
breaks SSL resumes.  Is there a case for checking server IP and port?

nagendra
_______________________________________________
TLS mailing list
[email-masked]
http://www.ietf.org/mailman/listinfo/tls