New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Recommend lifetime for a Security Context? #16

Open

rikard-sics opened this issue Jul 7, 2023 · 0 comments

Member

rikard-sics commented Jul 7, 2023

Shall we specify a recommended lifetime or leave it open?

Perhaps relevant:

The TLS 1.2 spec says: "An upper limit of 24 hours is suggested for session ID lifetimes, since an attacker who obtains a master_secret may be able to impersonate the compromised party until the corresponding session ID is retired."

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment