-
Bug
-
Resolution: Unresolved
-
P4
-
17, 21, 25, 26
-
None
Stateless session tickets currently reject any lifetimes greater than 7 days. This is correct for the TLS 1.3, but 1.2 uses a lifetime hint that suggests a lifetime length. If the hint is greater than the current max or 0, it shouldn't reject the ticket. RFC 5077 spec allows the client to store the ticket for a length of it's choosing.