4 ms·
Disabling SSL renegotiation is a crutch, not a fix
- cperciva 16y agoI disagree. SSL renegotiation is something which should never have existed in the first place. We'd be better off if the TLS working group had removed renegotiation from the standard rather than trying to fix it. If you want new keys, open a new connection.