Re:TLS 1.3 at Apple
by readams on Wednesday June 14, 2017 @05:53PM
(#14556412)
0-RTT is not automatically enabled. You need to opt in.
[ Parent
| on HN ]
Like if you're a CloudFlare customer? https://blog.cloudflare.com/introducing-0-rtt/ They enable it for TLS 1.3 by default for "GET requests with no query parameters" and place at least some of the onus on the origin server to detect replays (via a "Cf-0rtt-Unique" HTTP header).