4 ms·

HTTPS is slower, though; Google has been pounding into our heads for the past year that any milliseconds you can shave off your load time will result in signif

HTTPS is slower, though; Google has been pounding into our heads for the past year that any milliseconds you can shave off your load time will result in significant improvements in page views and time spent on a site. I don't see this ever happening, although I do hope that the SPDY protocol (or something similar) becomes the standard one day, as it's both secure and fast.

mike-cardwell 16y ago
I've never found that argument very convincing. I just sat here and ran the following two commands a bunch of times: time wget -q -O /dev/null http://www.google.com/ http://www.google.com/ time wget -q -O /dev/null https://www.google.com/ https://www.google.com/ There is no obvious difference in time taken to serve those requests. Obviously there is an overhead, but to me it seems insignificantly small in comparison to the overall request. I bet 99% of websites out there could convert to SSL, and then pull back the performance lost by just doing a little site optimisation.
- JangoSteve 16y ago
  The performance difference between https and http depends on a ton of factors. The reason you don't see a performance difference between these two requests is most likely because: -Google's servers are big enough they can easily handle the extra load of encryption without breaking a sweat -One of the many factors that makes SSL slower is that assets will not be cached in a shared cached (e.g. a proxy server), and will also not be cached in a browser beyond a single session (usually). So, stylesheets, javascripts, and images, must be downloaded to the browser much more often. Note that your wget test completely ignores this last point, because it is not trying to cache anything for either https or http.
  - mike-cardwell 16y ago
    Regarding your second point. I'd be interested to see figures for how many web requests globally are fulfilled by a shared cache. My gut feeling is that it is a very small proportion of the total.
    - JangoSteve 16y ago
      Yeah, I'd be interested too. Though, entire web requests wouldn't be fulfilled by a shared cache, just cached assets with proper Expires headers, such as javascripts, stylesheets, etc. I actually wouldn't be incredibly surprised to learn that shared caches in proxy servers are quite efficient at serving cached content. If you think about it, it's in internet providers' best interest to make their proxy servers good at caching, because it would allow them to provide more content to their customers with less bandwidth, which of course affects their bottom-line.
agl 16y ago
We (Google) are working hard to reduce the round trips needed for SSL/TLS. We hope to be publishing several draft specs in the next couple of months.

mike-cardwell 16y ago

I've never found that argument very convincing. I just sat here and ran the following two commands a bunch of times: time wget -q -O /dev/null http://www.google.com/ http://www.google.com/ time wget -q -O /dev/null https://www.google.com/ https://www.google.com/ There is no obvious difference in time taken to serve those requests. Obviously there is an overhead, but to me it seems insignificantly small in comparison to the overall request. I bet 99% of websites out there could convert to SSL, and then pull back the performance lost by just doing a little site optimisation.

JangoSteve 16y ago
The performance difference between https and http depends on a ton of factors. The reason you don't see a performance difference between these two requests is most likely because: -Google's servers are big enough they can easily handle the extra load of encryption without breaking a sweat -One of the many factors that makes SSL slower is that assets will not be cached in a shared cached (e.g. a proxy server), and will also not be cached in a browser beyond a single session (usually). So, stylesheets, javascripts, and images, must be downloaded to the browser much more often. Note that your wget test completely ignores this last point, because it is not trying to cache anything for either https or http.
- mike-cardwell 16y ago
  Regarding your second point. I'd be interested to see figures for how many web requests globally are fulfilled by a shared cache. My gut feeling is that it is a very small proportion of the total.
  - JangoSteve 16y ago
    Yeah, I'd be interested too. Though, entire web requests wouldn't be fulfilled by a shared cache, just cached assets with proper Expires headers, such as javascripts, stylesheets, etc. I actually wouldn't be incredibly surprised to learn that shared caches in proxy servers are quite efficient at serving cached content. If you think about it, it's in internet providers' best interest to make their proxy servers good at caching, because it would allow them to provide more content to their customers with less bandwidth, which of course affects their bottom-line.

agl 16y ago

We (Google) are working hard to reduce the round trips needed for SSL/TLS. We hope to be publishing several draft specs in the next couple of months.