The resumption parameters might be used to uniquely identify a person... that's an interesting point. But is that a big enough flaw to justify throwing out the

The resumption parameters might be used to uniquely identify a person... that's an interesting point. But is that a big enough flaw to justify throwing out the baby of TLS with the bathwater of tiny details like that? I'm sure there are people who are much smarter than both of us who can fix that without giving up on TLS altogether.