Re: [Emu] NewSessionTicket, Resumption, close_notify, and number of round-trips

2021-01-27 Thread Alan DeKok
On Jan 27, 2021, at 3:25 PM, Joseph Salowey wrote: > [Joe] It seems that resumption would help in the case that large certificates > cause multiple round trips. Do you have an idea of how widespread resumption > use is in current EAP-TLS implementations? It's common. Perhaps not ubiquitous,

Re: [Emu] NewSessionTicket, Resumption, close_notify, and number of round-trips

2021-01-27 Thread Joseph Salowey
On Wed, Jan 27, 2021 at 7:17 AM Alan DeKok wrote: > On Jan 27, 2021, at 10:09 AM, John Mattsson 40ericsson@dmarc.ietf.org> wrote: > > > > Looking at the GitHub version after the latest changes. I don't think > the tradeoffs make sense anymore. > > > > - Full handshake is now 4.5 round-trips

Re: [Emu] NewSessionTicket, Resumption, close_notify, and number of round-trips

2021-01-27 Thread Alan DeKok
On Jan 27, 2021, at 10:09 AM, John Mattsson wrote: > > Looking at the GitHub version after the latest changes. I don't think the > tradeoffs make sense anymore. > > - Full handshake is now 4.5 round-trips Does that account for large / long certificate chains? > - Resumption is now 4.5 roun

[Emu] NewSessionTicket, Resumption, close_notify, and number of round-trips

2021-01-27 Thread John Mattsson
Hi, Looking at the GitHub version after the latest changes. I don't think the tradeoffs make sense anymore. - Full handshake is now 4.5 round-trips - Resumption is now 4.5 round-trips. This does not seem like a good tradeoff or optimization at all. If we instead skipped Resumption, the full h