{"push_id":3081216003,"size":3,"distinct_size":1,"ref":"refs/heads/disable-tls-session-tickets","head":"17ec46b3ec6c3b3076c3e994ff4064f2e664786c","before":"0705439d0b846f53d06a814378c1c574b47e4444","commits":[{"sha":"9bc398abf554c7d7dd3f9bf5bf6475a781cb6c35","author":{"name":"Michael Pöhn","email":"17b9e1c64588c7fa6419b4d29dc1f4426279ba01@poehn.at"},"message":"add sample-webkit","distinct":false,"url":"https://api.github.com/repos/eighthave/NetCipher/commits/9bc398abf554c7d7dd3f9bf5bf6475a781cb6c35"},{"sha":"dc612b6b6cd71325687c77627d30d4e8465aba58","author":{"name":"Hans-Christoph Steiner","email":"8800578b51f022c8d8adb9606a8b3db4fedbdac6@eds.org"},"message":"set sample-webkit to use same build-tools as other sample projects\n\nThis should fix this error:\nThe SDK Build Tools revision (24.0.1) is too low for project\n ':sample-webkit'. Minimum required is 25.0.0","distinct":false,"url":"https://api.github.com/repos/eighthave/NetCipher/commits/dc612b6b6cd71325687c77627d30d4e8465aba58"},{"sha":"17ec46b3ec6c3b3076c3e994ff4064f2e664786c","author":{"name":"Hans-Christoph Steiner","email":"8800578b51f022c8d8adb9606a8b3db4fedbdac6@eds.org"},"message":"HttpURLConnection: disable TLS Session Tickets\n\nTLS Session Tickets are used to resume TLS sessions.  They are sent in\nplain text before TLS is started up.  They are in effect a cookie that can\nbe viewed from anyone who can see the network traffic.  Even worse, the\nserver can easily set specific cookies in order to track users.  They are\nused to speed up renegotiation of TLS on reconnect, so disabling this will\ncause increased latency and bandwidth usage.\n\nThanks to @dkg for alerting me to this issue.\n\nhttps://timtaubert.de/blog/2014/11/the-sad-state-of-server-side-tls-session-resumption-implementations/","distinct":true,"url":"https://api.github.com/repos/eighthave/NetCipher/commits/17ec46b3ec6c3b3076c3e994ff4064f2e664786c"}]}
{"actor":{"display_login":"eighthave"}}