0

Can anyone explain the below "Session resumption (caching)" warning to me and how to deal with it? It's from an SSL Labs test.

Screenshot of "Session resumption (caching)" warning.

  • What's providing this warning? What's the context? – schroeder Feb 2 at 15:51
  • Tets on sslab test – Mohamad Feb 2 at 15:53
3

This isn't a security warning at all. It is more an indicator of a misconfiguration which is bad for performance but not relevant for security: The server issues session ID's for resumption but if the client tries to resume a session using the server provided ID it will not work. For reasons this might happen see this discussion.

| improve this answer | |

Not the answer you're looking for? Browse other questions tagged or ask your own question.