* The debug logs display two "SSL-Session" blocks in a full handshake. Only one "SSL-Session" block is displayed in a resumption. Why does full handshake has two sessions?
This is part of the TLS 1.3 standard. A server can send back multiple sessions, so that a client may resume with a different session, and therefore prevent an observer from “linking” two different activities.
-- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
