3 ms·
If you are concerned for speed, you want to go with one of the "big boys" to get a cert that is closer to the root the browser trusts. The more intermediate cer
by WALoeIII 16y ago
If you are concerned for speed, you want to go with one of the "big boys" to get a cert that is closer to the root the browser trusts. The more intermediate certificates you have to supply, the more the client has to download to complete hand-shake, and you should strive to keep it under 4k to avoid overflowing the initial TCP window (which would then require another round-trip).
- jbyers 16y agoNo need to go with the big boys, just go with the unchained boys. RapidSSL / GeoTrust offer unchained certs that are teeny (< 2K) compared to GoDaddy (4K+, 2 chain certs) and others.