3 ms·
The server hosting this website doesn't support TLS 1.3 - if it did then you'd have 0 round trip time (0-RTT) session resumption and it would be nearly identica
by arkadiyt 7y ago
The server hosting this website doesn't support TLS 1.3 - if it did then you'd have 0 round trip time (0-RTT) session resumption and it would be nearly identical to the http latency.
- Thorrez 7y agoDo servers automatically support 0-RTT? I thought generally you have to explicitly enable 0-RTT because it's vulnerable to replay attacks. Generally you would only enable it for idempotent requests, and feedback is not idempotent (unless the database explicitly rejects duplicate feedback).
- Nextgrid 7y ago0-RTT is dangerous for POST requests (or any requests that modify data) unless an idempotency token is present.