What is the difference between session resumption in TLS v1.1vs TLS v1.2?

Question

Scenario: We are planning to implement Session resumption to reduce data usage to handle multiple reconnect issue.

Our Azure system is using tls v1.1 , I just checked Session resumption is available in tls v1.1. All these days I was in an assumption it is only available in tls v1.2.

Question: Can someone tell me should I really want to upgrade towards tls v1.2 or I can stay with tls v1.1 itself to achieve the same ?

Reference: https://www.rfc-editor.org/rfc/rfc4346#appendix-F.1.4

Any suggestion guys ?

Answer 1

There is no easy answer to this. There are several factors that have to be taken into account:

• Do all of your client stacks support TLS 1.2?
• Is the application functionality tested with TLS 1.2?

If answer to the above is yes, then you could enforce TLS 1.2. However, there might be other scenarios, that I might have taken into account. So you will have to do a run through of the scenarios that can possible exist.