language

Author: bagder

usingcurl/tls/session.md

@@ -41,15 +41,15 @@ Example:
     curl --ssl-sessions tls-cache.txt https://example.com
 
 The main benefit of --ssl-sessions is a reduction in Time To First Byte
-(TTFB). In a resumed session, the server does not need to re-send its entire
+(*TTFB*). In a resumed session, the server does not need to re-send its entire
 certificate chain, which can often be several kilobytes of data. Furthermore,
 session resumption often requires fewer round-trips than a full handshake.
 When combined with --tls-earlydata (0-RTT), curl can even send the HTTP
 request in the first packet of the connection.
 
 ## Early data
 
-The `--tls-earlydata` option, is the switch that enables **TLS 1.3 0-RTT (Zero
+The --tls-earlydata option, is the switch that enables **TLS 1.3 0-RTT (Zero
 Round Trip Time)**. In a standard TLS handshake, even with version 1.3, there
 is a back-and-forth exchange before the client can send its actual request
 (like an HTTP GET). 0-RTT allows a client that has connected to a server
@@ -77,16 +77,16 @@ is a standard security fallback), `curl` will automatically retry the request
 using a normal handshake, so there is no risk of the connection failing
 entirely because you used the flag.
 
-## Security and Idempotency
+## Security and idempotency
 
 Because 0-RTT data is sent before the full handshake is finalized, it is
 technically vulnerable to **replay attacks**. An attacker could capture the
 early data packet and resend it to the server. For this reason, `curl` (and
 most responsible clients) should only use early data for **idempotent**
 requests—those that do not change state on the server, like `GET` or `HEAD`.
-You should avoid using `--tls-earlydata` with `POST` or `DELETE` requests
-unless you are absolutely certain the server has specific protections (like
-unique tokens or strict replay windows) in place.
+You should avoid using --tls-earlydata with `POST` or `DELETE` requests unless
+you are absolutely certain the server has specific protections (like unique
+tokens or strict replay windows) in place.
 
 ## Session tracking
 
@@ -111,7 +111,7 @@ disable 0-RTT entirely when high levels of anonymity are required.
 
 ## Requirements
 
-To see the benefits of `--tls-earlydata`, several stars must align:
+To see the benefits of --tls-earlydata, several stars must align:
 
 * **TLS 1.3**: The server and client must both support and negotiate TLS 1.3.
 

wordlist.txt

@@ -231,6 +231,7 @@ HTTPHEADER
 HTTPS
 https
 Huawei
+idempotency
 IDN
 IETF
 ifdef
@@ -447,6 +448,7 @@ RTMPS
 RTP
 RTSP
 rtsp
+RTT
 runpath
 runtests
 runtime