4 ms·

This seems to be in the GnuTLS implementation and not the specification itself as the title led me to believe.

• bpfrh 6y ago
  Agreed, would be better if the title would be changed to "MITM flaw in Gnutls implementation of TLS 1.2 & 1.3"
• dang 6y ago
  Fixed now. Submitted title was "TLS 1.3 session resumption works without master key, allowing MITM"