Hacker News new | past | comments | ask | show | jobs | submit login

One of the original goals of Google's QUIC[0] protocol was to achieve 0-RTT handshake. I wonder how TLS 1.{2,3} Session Tickets will affect the future of that protocol. Has it achieved it's purpose (applying the right pressure to the TLS working group)? Will it be phased out now?

[0] https://blog.chromium.org/2013/06/experimenting-with-quic.ht...




I felt like Google was not going to move to TLS 1.3 if they had not included 0-RTT. Now that TLS 1.3 has agreed to include it, it seems logical to terminate QUIC crypto.


TLS 1.3 also supports 0 RTT. Subject to some replay attacks, the solution to which is β€œthe application should detect and ignore that.”




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: