Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Disable the use of session tickets on TLSv1.2 by default #1970

Merged
merged 3 commits into from Sep 25, 2020
Merged

Disable the use of session tickets on TLSv1.2 by default #1970

merged 3 commits into from Sep 25, 2020

Commits on Sep 18, 2020

  1. disable the use of session tickets on TLSv1.2 by default 

    Since currently session resumption is not supported by urllib3,
there is no reason to request tickets from the server.
It takes up extra bytes in transit (~200 bytes), and raises
some minor security concerns.

See also: https://blog.filippo.io/we-need-to-talk-about-session-tickets/
    @PleasantMachine9
    PleasantMachine9 committed Sep 18, 2020
    Copy the full SHA
    38c2679 View commit details
    Browse the repository at this point in the history

Commits on Sep 25, 2020

  1. Update ssl_.py

    @sethmlarson
    sethmlarson committed Sep 25, 2020
    Copy the full SHA
    69e82e3 View commit details
    Browse the repository at this point in the history

  2. Update ssl_.py

    @sethmlarson
    sethmlarson committed Sep 25, 2020
    Copy the full SHA
    1bda47f View commit details
    Browse the repository at this point in the history