tree 91ae5126c92f1f812a95cec4b1ff09510e82d5fe
parent 51088ce68fee0bae52118d6823873417046f9efe
author Olivier Houchard <ohouchard@haproxy.com> 1546958132 +0100
committer Willy Tarreau <w@1wt.eu> 1547047593 +0100
encoding latin1

DOC: Be a bit more explicit about allow-0rtt security implications.

Document a bit better than allow-0rtt can trivially be used for replay attacks,
and so should only be used when it's safe to replay a request.

This should probably be backported to 1.8 and 1.9.