TLS Session Resumption without Server Side State

1
TLS Session Resumption without Server Side State
IETF 64

• Hao Zhou
• Joe Salowey
• Pasi Eronen
• Hannes Tschofenig

2
Ticket Based Session Resume

• Session state is encrypted in a ticket by the
  server and sent to the client
• Consumes fewer resources on the server
• Allows failover and load balancing
• When the client wants to resume the session it
  presents the ticket
• New TLS Extension and Handshake message

3
Status

• draft-salowey-tls-ticket-04.txt reviewed by the
  TLS working group
• Several good comments (Thanks!)
• draft-salowey-tls-ticket-05.txt main changes
• Clarification of interaction with Session ID
• Clarification of extension and handshake
  processing
• Standard Ticket format encouraged
• Plan to submit to the IESG for publication in
  standards track