2 ms·
0-RTT has to be supported by both sides in order to work. If a server receives a 0-RTT request under circumstances where it deems 0-RTT unsafe (such as one that
by ameliaquining 8y ago
0-RTT has to be supported by both sides in order to work. If a server receives a 0-RTT request under circumstances where it deems 0-RTT unsafe (such as one that modifies state), it can simply refuse to process the request and instead respond with the normal TLS handshake. If an attacker later tried to replay that request, the same thing would happen.