3 ms·
The post made it sound like just the bugfixes are in 1.0.0e, but the performance improvements may have not been accepted yet. I wonder if that is the case? Thi
by stock_toaster 15y ago
The post made it sound like just the bugfixes are in 1.0.0e, but the performance improvements may have not been accepted yet. I wonder if that is the case?
This is good to see, and I really appreciate the work google has put into making tls/ssl more pervasive.
I do wonder about the performance differences between their faster DHE implementation and what they were using before (RSA-RC4-SHA). I wish they had provided a bit of data on that.
- tptacek 15y agoIt kind of has to be less performant, just because ECDHE uses more bignum crypto primitives.
- stock_toaster 15y agoYeah, that makes sense. I was mostly curious about how much faster their new implementation was over the old, and how much slower it was than RSA-RC4-SHA.
- marshray 15y agoI think that with the session resumptions they got by using session tickets, this could easily end up being a net gain for them.