4 ms·
> The most obvious example is that you don't want to bog down your countrys civil defence agency with SSL/TLS protocol negotiations, if their website is being d
by profmonocle 11y ago
> The most obvious example is that you don't want to bog down your countrys civil defence agency with SSL/TLS protocol negotiations, if their website is being deluged by people trying to survive a natural disaster.
If TLS overhead is the last straw that brings down a web site, the site's infrastructure isn't suitable for delivering safety-critical information.
- floatboth 11y agoThis. Google measured TLS overhead on their servers – it was very small. If you can do TLS on Google scale, you can do it anywhere.
- smutticus 11y agoIt really depends on what your bottleneck is. If your bottle neck is already CPU, then TLS is not that big of a deal. If, OTOH, your bottleneck is disk, then implementing TLS can create substantial overhead.
- marcosdumay 11y agoWhat? How does TLS increase disk usage?
- dijit 11y agothere's more to it than that I guess. TLS adds quite a bit of memory overhead, it increases the network bandwidth due to padding, and if your CPU is eqipped with AES extensions (modern ones) then you still do compression usually. it can be difficult to cache certain things with TLS also- since you can't do transparent caching. (although this is more a problem for those running squid proxies at work on a stretched out line). TLS is certainly an overhead and it's not required in cases where I'm checking a bulletin about earthquakes.
- nine_k 11y agoHow so? If your bottleneck is disk, you probably have quite some CPU cycles to spare, because the CPU is waiting for I/O most of the time.
- phkamp 11y agoAre you willing to pay increased taxes, so that FEMA (Or your countrys similar) can afford to run 100.000 servers, in order to "do TLS on Google scale", so that they can get emergency orders out for civil defence ? Have your forgotten (or maybe never seen ?) CNN's traffic graph from 9/11 ? Experience so far is that emergency services web-pages tend to die the instant they are most needed. Addint TLS will just make that happen even more.