Re: SSLSession invalidate

2011-09-15 Thread Henry Story
from on the same server path as the > application to which then one sends an ssl "logout signal". A browser plugin > references the https uri of the image. > > Does the cache release the image, collected over a session that is now closed? > > Sent from my iPhone > >

Re: SSLSession invalidate

2011-09-15 Thread Henry Story
You can break TLS sessions once you have the session_id. I tried this in Clerezza (an apache incubator project) to see if I could get something like a logout functionality to work. I even tried to see if breaking a connection and throwing one of the exceptions that TLS defines would force the br