Re: [PATCH] session ticket support

[Simon Josefsson]

Nikos Mavrogiannopoulos <address@hidden> writes:

> Simon Josefsson wrote:
>
>> I'm not sure, couldn't there be situations where applications want to
>> use the RFC ticket format?  Maybe the format should be configurable, so
>> the application can decide.  Since you have already written support for
>> the RFC ticket format, I think it would be nice to support it somehow.
>
> Actually the ticket format is transparent (or better encrypted) to
> everyone except gnutls. Thus there is very little incentive to keep
> separate code for something that is useful only to us (if someone can
> use our ticket, it should be problem in our encryption :).

If we use our own pack/unpack format, it won't be possible to set up TLS
load-balancing between GnuTLS and some other implementation that accepts
session tickets on another format.  Maybe that is a minor issue, but it
could come up.  Or is there some other reason why that setup would never
work anyway?

/Simon