3 ms·
That's true, and you shouldn't support TLS compression anyway (to resolve attacks like CRIME). You should also set SSL_MODE_RELEASE_BUFFERS to reclaim memory f
by skuhn 11y ago
That's true, and you shouldn't support TLS compression anyway (to resolve attacks like CRIME).
You should also set SSL_MODE_RELEASE_BUFFERS to reclaim memory from idle SSL connections.