Navigation section

rfc5077

About this tag
RFC 5077 defines a mechanism for TLS session resumption using session tickets, reducing the need for full handshakes. On Windows, an update addressed interoperability issues between Schannel-based TLS clients and third-party TLS servers implementing RFC 5077. The update fixed a bug in schannel.dll that could cause session ticket resumption to fail, leading WinInet-based clients like Internet Explorer and Microsoft Edge to fall back to a lower TLS protocol version. This improvement was part of Microsoft's efforts to enhance TLS security and compatibility. The tag covers discussions about this specific update and its impact on Windows TLS implementations.
  1. News

    3109853 - Update to Improve TLS Session Resumption Interoperability - Version: 1.0

    Revision Note: V1.0 (January 12, 2016): Advisory published. Summary: Microsoft is announcing the availability of an update to improve interoperability between Schannel-based TLS clients and 3rd-party TLS servers that enable RFC5077-based resumption and that send the NewSessionTicket message in...
    • News
    • Thread
    • bug fixes client encryption internet explorer interoperability microsoft edge network patch protocol rfc5077 schannel security server software technical advisory tls update version 1.0 windows wininet
    • Replies: 0
    • Forum: Security Alerts
Back
Top