TLS 1.3 0-RTT and HTTP 425 Too Early: Handling Replay on the Server
TLS 1.3 early data has no guarantee against replay across connections. Based on RFC 8446 and RFC 8470: what 0-RTT does not protect, how the Early-Data header works, and when to send 425.
TLS 1.30-RTTHTTP 425replay attacksweb security