4 ms·

No, it's not true anymore. From the link you replied to: "On our production frontend machines, SSL/TLS accounts for less than 1% of the CPU load, less than 10

by snom380 11y ago

No, it's not true anymore. From the link you replied to: "On our production frontend machines, SSL/TLS accounts for less than 1% of the CPU load, less than 10 KB of memory per connection and less than 2% of network overhead. Many people believe that SSL/TLS takes a lot of CPU time and we hope the preceding numbers will help to dispel that." - Adam Langley, Google Getting an SSL certificate used to be a cost, but that's taken care of now by https://letsencrypt.org/ https://letsencrypt.org/.

ikeboy 11y ago
So can you recommend a mirror for them that supports SSL? There are multiple named projects there that aren't using SSL, and I don't think it's just laziness. If you know of a way for them to use SSL mirrors for no additional cost, I'll work on getting them to switch over.
- codehusker 11y ago
  Debian, Ubuntu, Qubes, and others are on https://mirrors.kernel.org https://mirrors.kernel.org. I suspect that wiki page you linked might be out of date. It seems like all of the Whonix download links on their website are over https, like the VirtualBox images https://www.whonix.org/download/12.0.0.3.2/Whonix-Workstation-12.0.0.3.2.ova https://www.whonix.org/download/12.0.0.3.2/Whonix-Workstatio.... Whonix also runs a tor mirror, which has significantly more overhead than TLS.
  - ikeboy 11y ago
    Huh. The language there seems to be from 2013. I seem to remember downloading whonix from their site over HTTP around a year ago. Do you see a tails HTTPS mirror?
  - codehusker 11y ago
    I know the last time I played with Whonix it was http, so I think you're right that it's a recent change. For tails: https://tails.thecthulhu.com/ https://tails.thecthulhu.com/. It appears to be the same server behind http://dl.amnesia.boum.org/ http://dl.amnesia.boum.org/ based on the TLS cert. The situation is messy to actually use https for all of these projects, but I think the issue now is organization rather than overhead.
- deleted 11y ago
  [deleted]

by snom380 11y ago

ikeboy 11y ago

So can you recommend a mirror for them that supports SSL? There are multiple named projects there that aren't using SSL, and I don't think it's just laziness. If you know of a way for them to use SSL mirrors for no additional cost, I'll work on getting them to switch over.

codehusker 11y ago
Debian, Ubuntu, Qubes, and others are on https://mirrors.kernel.org https://mirrors.kernel.org. I suspect that wiki page you linked might be out of date. It seems like all of the Whonix download links on their website are over https, like the VirtualBox images https://www.whonix.org/download/12.0.0.3.2/Whonix-Workstation-12.0.0.3.2.ova https://www.whonix.org/download/12.0.0.3.2/Whonix-Workstatio.... Whonix also runs a tor mirror, which has significantly more overhead than TLS.
- ikeboy 11y ago
  Huh. The language there seems to be from 2013. I seem to remember downloading whonix from their site over HTTP around a year ago. Do you see a tails HTTPS mirror?
- codehusker 11y ago
  I know the last time I played with Whonix it was http, so I think you're right that it's a recent change. For tails: https://tails.thecthulhu.com/ https://tails.thecthulhu.com/. It appears to be the same server behind http://dl.amnesia.boum.org/ http://dl.amnesia.boum.org/ based on the TLS cert. The situation is messy to actually use https for all of these projects, but I think the issue now is organization rather than overhead.
deleted 11y ago
[deleted]