Re: [TLS] Network middlebox corrupting TLS session resumes

2018-02-09 Thread David Benjamin
I don't think we've observed this particular issue. We have observed middleboxes which, when they see a ServerHello they can't parse (such as the pre-draft-22 TLS 1.3 ServerHello), drop the ServerHello record on the floor, but pass through any following application_data records as-is. That's

[TLS] Network middlebox corrupting TLS session resumes

2018-02-09 Thread Martin Rex
Hi, During the analysis of a recent customer support call, I determined from a wireshark/network trace that the cause of unexpected failures of TLS session resumption handshakes were caused by some broken network middlebox, which allegedly was configured for "SSL inspection". I would like to