3 ms·
TLS in hardware must have suffered a lot from successive TLS version changes? I.e that hardware quickly becomes obsolete.
by kzrdude 5y ago
TLS in hardware must have suffered a lot from successive TLS version changes? I.e that hardware quickly becomes obsolete.
- dijit 5y agoYes, this is true, which is why some high traffic (non-tech company) sites, like the frontends for banking, are slower to move than others. Sometimes the entire frontend of a bank (Say: HSBC, which is a global bank) can fit into 3 racks of servers. Not saying it's the right thing, just confirming your question.
- 10000truths 5y agoNot really. The only thing that needs to be offloaded is the record encapsulation (the format of which has remained backwards compatible) and the encryption/decryption (which is limited to AES-GCM for all intents and purposes). The handshake and the control messages can still be handled in software, since those aren't in the critical path.