3 ms·

Interesting, but what about the latency issues of having to always contact the key server?

• jgrahamc 12y ago
  There's a very technical blog post coming on this tomorrow, but that problem is addressed by session tickets and by the fact that most of the TLS handshake is occurring with a CloudFlare server typically nearer the web browser than before.
  • Rapzid 12y ago
    Do you guys have a "global" session ticket cache shared amongst endpoints? Or do you ensure the same user gets routed back to the same termination node? I'm quite curious about this.
    • eastdakota 12y ago
      Session Tickets are shared globally. Session IDs are shared intra-data center (so regionally). The former works with Chrome/Firefox. The latter with all other browsers.
      • ivanr 12y ago
        Do you use per-site session ticket keys?
      • Rapzid 12y ago
        That's really cool, thanks for responding. I imagined that possibility but never heard of anyone actually doing it(not to say they don't). Maybe I'll need to experiment around with Golang's TLS package :)