{"action":"created","issue":{"url":"https://api.github.com/repos/iojs/io.js/issues/1462","labels_url":"https://api.github.com/repos/iojs/io.js/issues/1462/labels{/name}","comments_url":"https://api.github.com/repos/iojs/io.js/issues/1462/comments","events_url":"https://api.github.com/repos/iojs/io.js/issues/1462/events","html_url":"https://github.com/iojs/io.js/issues/1462","id":69284170,"number":1462,"title":"Removing `newSession`/`resumeSession`","user":{"login":"indutny","id":238531,"avatar_url":"https://avatars.githubusercontent.com/u/238531?v=3","gravatar_id":"","url":"https://api.github.com/users/indutny","html_url":"https://github.com/indutny","followers_url":"https://api.github.com/users/indutny/followers","following_url":"https://api.github.com/users/indutny/following{/other_user}","gists_url":"https://api.github.com/users/indutny/gists{/gist_id}","starred_url":"https://api.github.com/users/indutny/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/indutny/subscriptions","organizations_url":"https://api.github.com/users/indutny/orgs","repos_url":"https://api.github.com/users/indutny/repos","events_url":"https://api.github.com/users/indutny/events{/privacy}","received_events_url":"https://api.github.com/users/indutny/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/iojs/io.js/labels/semver-major","name":"semver-major","color":"fbca04"},{"url":"https://api.github.com/repos/iojs/io.js/labels/tls","name":"tls","color":"fad8c7"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":12,"created_at":"2015-04-18T08:08:35Z","updated_at":"2015-04-18T16:32:13Z","closed_at":null,"body":"SSL session ids are so outdated, let's remove them. TLS tickets is a modern age and they are very widely deployed!\r\n\r\nI'd like to remove it to get rid of the ClientHelloParser. `SSL_set_cert_cb` is a new OpenSSL-1.0.2 API that we are going to use instead.\r\n\r\nThe list of the modules that will no longer work:\r\n\r\n* env->SetProtoMethod(t, \"endParser\", EndParser);\r\n* ...\r\n\r\nPlease comment if you have a use case for this API, or know a module that does depend on it.\r\n\r\ncc @iojs/collaborators @iojs/community-members @iojs/crypto "},"comment":{"url":"https://api.github.com/repos/iojs/io.js/issues/comments/94178992","html_url":"https://github.com/iojs/io.js/issues/1462#issuecomment-94178992","issue_url":"https://api.github.com/repos/iojs/io.js/issues/1462","id":94178992,"user":{"login":"pquerna","id":110123,"avatar_url":"https://avatars.githubusercontent.com/u/110123?v=3","gravatar_id":"","url":"https://api.github.com/users/pquerna","html_url":"https://github.com/pquerna","followers_url":"https://api.github.com/users/pquerna/followers","following_url":"https://api.github.com/users/pquerna/following{/other_user}","gists_url":"https://api.github.com/users/pquerna/gists{/gist_id}","starred_url":"https://api.github.com/users/pquerna/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pquerna/subscriptions","organizations_url":"https://api.github.com/users/pquerna/orgs","repos_url":"https://api.github.com/users/pquerna/repos","events_url":"https://api.github.com/users/pquerna/events{/privacy}","received_events_url":"https://api.github.com/users/pquerna/received_events","type":"User","site_admin":false},"created_at":"2015-04-18T16:32:13Z","updated_at":"2015-04-18T16:32:13Z","body":"- Removing support for sessions doesn't seem quite right yet.  Tickets are better for most cases, but esp in non-browser stacks (eg, API clients) TLS feature adoption has always lagged.  Getting real and updated numbers would be helpful in validating this of course.\r\n\r\n- Extending the tickets API to allow multiple keys and key rotation is a good idea.\r\n"}}