Re: SSL session length

2000-04-26 Thread Lutz Jaenicke
On Wed, Apr 26, 2000 at 04:49:19PM +0200, Alexander 'Alfe' Fetke wrote: ... > there should be no problem in keeping up a session for several hours; in > fact, a week should (technically) be no problem. ssl even provides a > feature to cache ssl connections which allows communicators to skip the >

SSL session length

2000-04-24 Thread Jacob Cohen
Is it generally a bad idea to allow users to use the same SSL session for say, an hour? (using 128 bit encryption) I am trying to play with session caches distributed amongst multiple web servers to allow a user to reuse the same session for up to an hour (by sharing session info among the web