Forum Discussion
Pradeep_Kandala
Nimbostratus
Nimbostratusrenogitation
Renegotiates a client-side or server-side SSL connection, depending on the context.-- What does it mean ??
Is it means if in http request its client side and if in http response its in server-side.
Sorry, if it looks like a dumb question.
Thanks in Advance
Pradeep
- Kevin_Stewart
Employee
Pradeep,
Renegotiation has nothing to do with HTTP. It occurs after initial SSL negotiation and during an active SSL session to essentially "swap" encryption keys. It is a fairly standard security mechanism in that the longer a key is used the more vulnerable it becomes to attack. Both clients and servers can initiate renegotiation, and we have settings within the client and server SSL profiles to control how renegotiation is handled.
