- Home
- All questions
- Question 395
CompTIA Security+ study material · question 395 of 611
An API adopts TLS 1.3 zero-round-trip resumption for speed. Which request must not be sent as early data?
Show the answer
Answer: C. A payment submission
Early data is replayable, so anything that changes state must not travel in it.
Source: RFC 8446 (IETF) — RFC 8446 § 2.3 0-RTT Data and Appendix E.5