We need to talk about Session Tickets
https://blog.filippo.io/we-need-to-talk-about-session-tickets/ [blog.filippo.io]
2017-09-29 02:14
Unfortunately, a combination of deployment realities and three design flaws makes them the weakest link in modern TLS, potentially turning limited key compromise into passive decryption of large amounts of traffic.
source: L