Resume with a ticket
04A later connection can use a previously established PSK associated with a session ticket.
Terms in this drawing
This guide explains the 2018 publication. Superseded by RFC 9846.
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 2.2 ↗
RFC 8446 · § 2.2EXAMPLE
4 / 4
04
Protect the new connection.
This is PSK-with-(EC)DHE, not a replay of the old application keys.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
Read the updated RFC section ↗
A ticket helps establish a new connection; it is not the old traffic key.
- NewSessionTicket is sent after a completed handshake.
- A resumption ClientHello proves knowledge of its PSK through a binder.
- PSK resumption can include a fresh (EC)DHE exchange for forward secrecy.
The examples simplify the wire representation. Follow the linked specification and application profile for implementation.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy