The Illustrated TLS Connection

It’s a lovely guide. Saves a lot of time vs reading the RFCs when you just want to debug a session state flow&#x2F;log&#x2F;packet capture.<p>The one thing I wish it had was better tracing of branch points like session resumption. It would make walking session state logs simpler.<p>I ran into this while trying to figure out if the open source Kubernetes nginx ingress supported session resumption on the upstream side (it doesn’t; a deficiency in the lua balancer). While the diversion into nginx source and other sundries was nice, I could have saved that time :)

Prior comments: <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=18200749" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=18200749</a>

That was absolutely fantastic.<p>It’d be a pleasure to see a version for 1.3, but not all Maintained SSL libraries implement it yet, <a href="https:&#x2F;&#x2F;github.com&#x2F;ARMmbed&#x2F;mbedtls&#x2F;issues&#x2F;508" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;ARMmbed&#x2F;mbedtls&#x2F;issues&#x2F;508</a> mbedTLS tls for example appears not to have it landed. This is one library often used in IoT environments

One including mutual authentication would be appreciated