XF 2.1 Is unmodified XenForo 2.1 safe for TLSv1.3 0-RTT?

niemiro

New member
In particular, can we enable 0-RTT for all GET requests in core XenForo, even those with parameters?

In other words, do you guarantee that all GET requests in XenForo are idempotent?

(I understand that we must ourselves check all our add-ons are secure against replay attacks.)

Thank you.
 
Top Bottom