TLS 1.3 introduces '0-RTT' Resumption. What is the security risk?

1. A It relies on a specialized, lower-level cryptographic suite that has been mathematically proven to be vulnerable to high-intensity side-channel and timing attacks.
2. B It exposes the server's master private key during the initial unencrypted greeting, potentially allowing any passive network-level listener to fully decrypt all subsequent traffic.
3. C It fundamentally requires the host to disable all domain name system (DNS) security extensions, which renders the entire connection vulnerable to various 'man-in-the-middle' hijacks.
4. D Replay Attacks; because the server accepts application data before a fresh handshake has proven the sender's identity, a hacker could 'replay' a captured packet (e.g., 'Transfer $100').