GnuTLS, a widely used open source library implementing Transport Layer Security, last week fixed a bug that had been hiding in the code for almost two years that made resumed TLS 1.3 sessions vulnerable to attack. The TLS handshake requires two round-trips between client and server to establish a secure connection.
Read full article on The Register