Requiring the peer to cache everything you send for the lifetime of the connection invites DoS attacks on memory consumption with giant/numerous (possibly fake) certs. There should be a way to signal that a certificate/request has been discarded; senders would need to re-send if they want to use in the future.
Requiring the peer to cache everything you send for the lifetime of the connection invites DoS attacks on memory consumption with giant/numerous (possibly fake) certs. There should be a way to signal that a certificate/request has been discarded; senders would need to re-send if they want to use in the future.