I uploaded a small pull request for the ticket request draft: https://github.com/tlswg/draft-ietf-tls-ticketrequest/pull/20
it stipulates that servers SHOULD send at least one ticket unless *both* counters are zero. A client willing to accept tickets for either of the two handshake types is capable of accepting a ticket for the other. Yes, this leaves the door open to later define (or not) special semantics for the zero value to be used between mutually consenting clients and servers. -- Viktor. _______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls