until tls session resumption gets more common and someone comes up with a "tls session resumption is not in fact secure" :( there were some talks in 2013 about

until tls session resumption gets more common and someone comes up with a "tls session resumption is not in fact secure" :( there were some talks in 2013 about this in various sec conferences