1 matches found
JLSEC-2026-802 TLS 1.2 session resumption can renew one master secret indefinitely
Reseau 1.1.0 through 1.3.1 issue a fresh TLS 1.2 session ticket after a resumed handshake by copying the original master secret while resetting the ticket's creation and expiry times. A client that resumes at least once during every ticket lifetime can keep the same master secret valid...
5.9AI score
SaveExploits0References3
20