WingNews logo WingNews
top | item 30321479

(no title)

frmdstryr | 4 years ago

This "feature" is also a major downside... protocol level user tracking. See https://svs.informatik.uni-hamburg.de/publications/2019/2019...

discuss

order

mgrund|4 years ago

Absolutely not a coincident that Google is proposing a protocol that allows protocol level user tracking. By making the session ticket server-initiated and not client-controlled all control is also stripped from the user.

ithkuil|4 years ago

The clients are free to make another "connection" and get a new session id every time they want. It's similar to http connection reuse: the src ip-port + dst-port also acts as a "session identifier", as long as multiple requests flow throug the same TCP connection.

joveian|4 years ago

TLS has session resumption with exactly the same issues, it is just more efficient in QUIC.