News for hackers. Stuff that matters.

A comment on Deploying TLS 1.3: the great, the good and the bad [video]. Parent comment

Re:Deploying TLS 1.3: the great, the good and the bad [video] by kpcyrd on Wednesday January 04, 2017 @03:21PM (#13321717)
Do you know of 0-RTT implementation efforts on reverse proxies, say, nginx?

Let's say I run a static website and I'm 100% sure unauthenticated GET won't break anything, is there anything special I need to do or is it going to be "enable this flag"?

Another question: Can I set 0-RTT per vhost (sni) or do I need dedicated 0-RTT IPs?

[ Parent | on HN ]
Re:Deploying TLS 1.3: the great, the good and the bad [video] by FiloSottile on Wednesday January 04, 2017 @04:07PM (#13322047)
There is no 0-RTT implementation in servers that I know of, except our internal one at Cloudflare, which currently waits for the Finished confirmation until we decide on a policy.

The following two questions are of course implementation-specific, but there is nothing in the protocol blocking a "just do 0-RTT" flag or vhost configs.

[ Parent | on HN ]