Why would a client send a TLS session ID (
96b839ce3aadb65780923d28a3e7e767fc5bddc507884a7e70e506d8b85a06d3 on its first visit to a server/website? My understanding is that the client would include a session ID in the
ClientHello message to indicate to the server that wants to resume a previous session. However, this wouldn't apply to a client's first visit. How is a TLS session ID generated? Is it a function of the cipher suites agreed upon/proposed by the client?
My client was a web browser on a desktop computer.