google / nogotofail

An on-path blackbox network traffic security testing tool
Apache License 2.0
2.94k stars 417 forks source link

Cleaner TLS/SSL session resumption prevention. #47

Closed klyubin closed 9 years ago

klyubin commented 9 years ago

This approach removes only the SessionTickets extension instead of removing all TLS extensions. Moreover, it does this by modifying the ClientHello instead of the ServerHello. This is advantageous because this makes both the client and the server perform a full handshake.