In windows 7, session tickets were disabled by disabling schannel cache, example:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL] "EventLogging"=dword:00000004 "MaximumCacheSize"=dword:00000000 "ServerCacheTime"=dword:00000000
Other Microsoft sources say the following in regard to Windows 10: Schannel EnableSessionTicket, value 2, disables Session Ticket TLS "Optimization" in the system.
Is there a difference between "Session Ticket TLS Optimization" and "Session Tickets in general?" Or is it TLS Session Tickets with OPTIMIZATION, like rtt0 or some other form of optimization?
Logically, I would assume disabling TLS session tickets would require the following entry
However, this source claims setting dword:00000002, the system will revert to handling TLS sessions exactly like the sessions were negotiated in earlier Windows Server operating systems.
To disable Session Tickets, does this mean users must enable the following 3?
"EnableSessionTicket"=dword:00000002 "MaximumCacheSize"=dword:00000000 "ServerCacheTime"=dword:00000000
And finally, what does