shibboleth-dev - Re: [Shib-Dev] Viability of SSL/TLS Session IDs usage for application Session IDs

Subject: Shibboleth Developers

List archive

Re: [Shib-Dev] Viability of SSL/TLS Session IDs usage for application Session IDs

From: "Cantor, Scott E." <>
To: "" <>
Subject: Re: [Shib-Dev] Viability of SSL/TLS Session IDs usage for application Session IDs
Date: Thu, 10 Feb 2011 01:49:49 +0000
Accept-language: en-US

On 2/9/11 8:45 PM, "Bradley Schwoerer"
<>
wrote:
>FWIW, Apple iOS products and most other mobile devices create a new tls
>session after short periods of time when on non-wifi connections. I have
>seen my iOS devices change ip addresses when there is 30seconds of
>network idle time on AT&T's 3G network.

I don't know if an IP address change necessarily invalidates a cached SSL
session. Guess I could read the RFC, but I'm not really that bored.

-- Scott

RE: [Shib-Dev] Viability of SSL/TLS Session IDs usage for application Session IDs, (continued)
- RE: [Shib-Dev] Viability of SSL/TLS Session IDs usage for application Session IDs, Rod Widdowson, 02/09/2011
- Re: [Shib-Dev] Viability of SSL/TLS Session IDs usage for application Session IDs, Kristof Bajnok, 02/09/2011
  - Re: [Shib-Dev] Viability of SSL/TLS Session IDs usage for application Session IDs, Chad La Joie, 02/09/2011
    - RE: [Shib-Dev] Viability of SSL/TLS Session IDs usage for application Session IDs, Cantor, Scott E., 02/09/2011
      - Re: [Shib-Dev] Viability of SSL/TLS Session IDs usage for application Session IDs, Chad La Joie, 02/09/2011
      - RE: [Shib-Dev] Viability of SSL/TLS Session IDs usage for application Session IDs, Peter Williams, 02/09/2011
- RE: [Shib-Dev] Viability of SSL/TLS Session IDs usage for application Session IDs, Peter Williams, 02/09/2011
  - RE: [Shib-Dev] Viability of SSL/TLS Session IDs usage for application Session IDs, Cantor, Scott E., 02/09/2011
    - RE: [Shib-Dev] Viability of SSL/TLS Session IDs usage for application Session IDs, Cantor, Scott E., 02/09/2011
      - Re: [Shib-Dev] Viability of SSL/TLS Session IDs usage for application Session IDs, Bradley Schwoerer, 02/09/2011
        
        Re: [Shib-Dev] Viability of SSL/TLS Session IDs usage for application Session IDs, Cantor, Scott E., 02/09/2011
        
        Re: [Shib-Dev] Viability of SSL/TLS Session IDs usage for application Session IDs, Michael J. Wheeler, 02/09/2011
        
        Re: [Shib-Dev] Viability of SSL/TLS Session IDs usage for application Session IDs, Eric Norman, 02/09/2011
      - Re: [Shib-Dev] Viability of SSL/TLS Session IDs usage for application Session IDs, Kaspar Brand, 02/10/2011
        
        RE: [Shib-Dev] Viability of SSL/TLS Session IDs usage for application Session IDs, Cantor, Scott E., 02/10/2011

List archive

Re: [Shib-Dev] Viability of SSL/TLS Session IDs usage for application Session IDs