Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [jetty-users] Enabling session resumption

Am 23.09.2019 um 15:13 schrieb Simone Bordet:
Run with, you will see what the JDK TLS
implementation does, and they do print whether the session was
Also, in Jetty, we do log in SslConnection whether the session was
resumed or not.

That should be enough to convince the pentesters.

It should be obvious in a Wireshark-trace as well which might be
more suitable as "proof" when shown to pen testers who I assume
are more "fluent" in Wireshark dumps than in reading
debug outputs.

Cheers, Lothar

Back to the top