%% You should probably cite rfc8470 instead of this I-D. @techreport{ietf-httpbis-replay-03, number = {draft-ietf-httpbis-replay-03}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-httpbis-replay/03/}, author = {Martin Thomson and Mark Nottingham and Willy Tarreau}, title = {{Using Early Data in HTTP}}, pagetotal = 12, year = 2018, month = may, day = 3, abstract = {Using TLS early data creates an exposure to the possibility of a replay attack. This document defines mechanisms that allow clients to communicate with servers about HTTP requests that are sent in early data. Techniques are described that use these mechanisms to mitigate the risk of replay.}, }