4 ms·
Protocols. You really don't want to sign every TLS packet with a 8MB signature or in this case, send 8MB key material over TLS before properly opening the sess
by tscs37 9y ago
Protocols.
You really don't want to sign every TLS packet with a 8MB signature or in this case, send 8MB key material over TLS before properly opening the session.
Even if you are the 1% with gigabit connections, that is going to induce some decent latency into the system.
It's simply wasteful.
- diafygi 9y agoHeh. The way web bloat is going, I can totally see a framework "optimizing" this by showing the user a spinner over HTTP while an ajax request does the first tls handshake, then redirects the user to the https version of the site.
- stephenr 9y agoThat defeats the purpose of https - the code/response that dictates the redirect can be intercepted and redirect the user to a malicious site.