boring2

Commit Graph

Author	SHA1	Message	Date
Eric Rosenberg	8db6134c75	bound session cache When establishing new TLS sessions, servers may send multiple session tickets (RFC8446 4.6.1). hyper-boring caches tickets without placing a limit on how many tickets are cached. This leads to unbounded growth of hyper-boring's cache and leaves clients vulnerable to malicious servers who might send many session tickets to exhaust a client's available memory. This change bounds the cache to a default of 8 tickets.	2024-04-07 17:03:52 -07:00
Anthony Ramine	602bb6d63d	Fix clippy lints	2023-10-09 11:49:07 +01:00
Ivan Nikulin	f4096d8afd	Add hyper-boring	2020-11-11 20:29:54 +00:00

Author

SHA1

Message

Date

Eric Rosenberg

8db6134c75

bound session cache

When establishing new TLS sessions, servers may send multiple session
tickets (RFC8446 4.6.1). hyper-boring caches tickets without placing a
limit on how many tickets are cached. This leads to unbounded growth of
hyper-boring's cache and leaves clients vulnerable to malicious servers
who might send many session tickets to exhaust a client's available
memory.

This change bounds the cache to a default of 8 tickets.

2024-04-07 17:03:52 -07:00

Anthony Ramine

602bb6d63d

Fix clippy lints

2023-10-09 11:49:07 +01:00

Ivan Nikulin

f4096d8afd

Add hyper-boring

2020-11-11 20:29:54 +00:00

3 Commits