Subject: [TLS] Using Warning Alerts to Accommodate Offline Attacks?

From: Jeffrey Walton <[email-masked]>
Date: Thu, 21 May 2015 14:51:34 -0400

The logjam paper is available at
https://weakdh.org/imperfect-forward-secrecy.pdf.

Note that the authors were successful in exploiting some user agents
because they could send an alert warning to reset the handshake timer.
The timer reset accommodated the offline portion of the attack. Cf.,
page 5.

Is this desired behavior? Or is it a security bug?

Jeff