As I understand it, this fix has already been proposed for TLS by the developers of the triple-handshake attack, but it may take some time to be implemented and may never be implemented everywhere.<p><a href="https:&#x2F;&#x2F;www.ietf.org&#x2F;archive&#x2F;id&#x2F;draft-bhargavan-tls-session-hash-01.txt" rel="nofollow">https:&#x2F;&#x2F;www.ietf.org&#x2F;archive&#x2F;id&#x2F;draft-bhargavan-tls-session-...</a><p>I&#x27;m not quite sure why this Internet-Draft expired without a replacement or if this work is still continuing somewhere in the TLS WG.