🎫

TLS Session Resumption: Tickets & PSK

Medium

Free preview · 2 of 5 steps

TLS session resumption: avoiding the full handshake overhead

A full TLS 1.2 handshake takes 2 round trips before application data can flow — 200ms on a 100ms RTT path. For users who reconnect frequently (mobile apps switching networks, browsers making many connections), this overhead adds up.

Session resumption lets the client and server skip the full key exchange by reusing cryptographic material from a previous session. The tradeoff: some resumption mechanisms weaken forward secrecy.

Packets in motion — click to inspect:

1 / 2

Space to play/pause · ← → to step