The only purpose of session resumption is performance, right? I thought someone published a report recently that real-world servers don't get enough successful

The only purpose of session resumption is performance, right? I thought someone published a report recently that real-world servers don't get enough successfully resumed sessions for it to even be worthwhile, particularly in a world with crypto hardware, SPDY and HTTP keepalive. Wouldn't it be easier to just disable TLS resume than to figure out how to do it right? edit: It was another agl article, https://www.imperialviolet.org/2010/06/25/overclocking-ssl.html https://www.imperialviolet.org/2010/06/25/overclocking-ssl.h...: Since the session information contains key material, it's never cached on disk so the attempted client resume rate, seen by Google, is only 50%.