JDK-8211018 : Session Resumption without Server-Side State
- Type: Enhancement
- Component: security-libs
- Sub-Component: javax.net.ssl
- Priority: P3
- Status: Resolved
- Resolution: Fixed
- Submitted: 2018-09-21
- Updated: 2021-11-15
- Resolved: 2019-06-11
The Version table provides details related to the release that this issue/RFE will be addressed.
Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.
To download the current JDK release, click here.
Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.
To download the current JDK release, click here.
| JDK 13 | JDK 14 |
|---|---|
13 b25Fixed  |
14Fixed |
Related Reports
|
CSR :
|
|
|
Duplicate :
|
|
|
Duplicate :
|
|
|
Relates :
|
|
|
Relates :
|
|
|
Relates :
|
|
|
Relates :
|
|
|
Relates :
|
|
|
Relates :
|
|
|
Relates :
|
|
|
Relates :
|
|
|
Relates :
|
|
|
Relates :
|
Sub Tasks
|
JDK-8227105 :
|
Description
The server stateless session resumption specification is define in RFC 5077 for TLS 1.2 and before, by making use the the SessionTicket extension. This extension has been widely supported by the major TLS vendors, like OpenSSL, GnuTLS, NSS, and Microsoft, and browsers like Firefox and Google Chrome. TLS 1.3 RFC includes new stateless resumption Session cache management is becoming a performance and scalability bottleneck.
Comments
|