[tor-dev] handling TLS Session Ticket/Identifier for Android

Hey all,

Since tor devs have thought about how to handle TLS Session Tickets and Identifiers, I want to capture that approach and stick it into our NetCipher library, which is also used in Orfox. As I understand it, the approach is:

* disable TLS Session Tickets entirely * reset TLS Session Identifiers on NEWNYM

Any plans to rethink this for TLS v1.3? Any other TLS tracking issues I should be addressing in NetCipher? I'd also appreciate any references on this topic (yes, I know how to find the relevant RFCs ;), like tor trac tickets. My searches have come up with very little.

.hc