comparison xml/en/docs/http/ngx_http_ssl_module.xml @ 2238:0761b770a94e

RFC8470.
author Sergey Kandaurov <pluknet@nginx.com>
date Fri, 21 Sep 2018 19:49:26 +0300
parents 20a189bdb15f
children b7ac730b96f3
comparison
equal deleted inserted replaced
2237:5268c13196f2 2238:0761b770a94e
8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd"> 8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd">
9 9
10 <module name="Module ngx_http_ssl_module" 10 <module name="Module ngx_http_ssl_module"
11 link="/en/docs/http/ngx_http_ssl_module.html" 11 link="/en/docs/http/ngx_http_ssl_module.html"
12 lang="en" 12 lang="en"
13 rev="41"> 13 rev="42">
14 14
15 <section id="summary"> 15 <section id="summary">
16 16
17 <para> 17 <para>
18 The <literal>ngx_http_ssl_module</literal> module provides the 18 The <literal>ngx_http_ssl_module</literal> module provides the
298 <para> 298 <para>
299 Enables or disables TLS 1.3 299 Enables or disables TLS 1.3
300 <link url="https://tools.ietf.org/html/rfc8446#section-2.3">early data</link>. 300 <link url="https://tools.ietf.org/html/rfc8446#section-2.3">early data</link>.
301 <note> 301 <note>
302 Requests sent within early data are subject to 302 Requests sent within early data are subject to
303 <link url="https://tools.ietf.org/html/draft-ietf-httpbis-replay-04">replay attacks</link>. 303 <link url="https://tools.ietf.org/html/rfc8470">replay attacks</link>.
304 To protect against such attacks at the application layer, 304 To protect against such attacks at the application layer,
305 the <link id="var_ssl_early_data">$ssl_early_data</link> variable 305 the <link id="var_ssl_early_data">$ssl_early_data</link> variable
306 should be used. 306 should be used.
307 </note> 307 </note>
308 308