Missing Support for TLS Session Tickets

Originator:pepi.zawodsky
Number:rdar://15794041 Date Originated:10-Jan-2014 08:19 PM
Status:Open Resolved:
Product:Safari Product Version:7.0.1 (9537.73.11)
Classification:Security Reproducible:Always
 
Summary:
Safari is missing support for TLS session tickets

Steps to Reproduce:
Visit: https://www.howsmyssl.com/

Expected Results:
Session Tickets should be supported.

Actual Results:
Session Tickets are not supported, negatively affecting the performance of websites that use https and try to protect their users from eavesdropping.

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!