Welcome! Log In Create A New Profile

Advanced

Re: TLS session resumption (identifier)

B.R.
March 04, 2016 05:32AM
On Fri, Mar 4, 2016 at 11:19 AM, Igor Sysoev <igor@sysoev.ru> wrote:

> Sorry, I meant there is no performance difference between “none” and “off”
> settings.
>

​Well, the client believes he should remember every session ID and store it
somewhere for nothing, reading/resending/writing it on every connection.
Small enough network traffic difference, though (the extra, useless ID in
the ClientHello message could be considered harmless, even though those
extra bytes appear on each TLS session establishement).

As to default value, builtin session cache was by default initially but it
> turned out that
> it leads to memory fragmentation. So the default value has been changed to
> “off” and
> later to “none”.
>
> Of course shared cache is certainly better as default value but there is
> no good understanding
> what default cache size should be used. And now it becomes less important
> with ticket introduction.
>

Total agreement there: I was not pushing for a default activating a cache,
but rather for the clean 'off' setting.​
---
*B. R.*
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

TLS session resumption (identifier)

B.R. March 03, 2016 06:52AM

Re: TLS session resumption (identifier)

Maxim Dounin March 03, 2016 08:30AM

Re: TLS session resumption (identifier)

B.R. March 03, 2016 10:44AM

Re: TLS session resumption (identifier)

Igor Sysoev March 03, 2016 10:50AM

Re: TLS session resumption (identifier)

B.R. March 04, 2016 04:22AM

Re: TLS session resumption (identifier)

Igor Sysoev March 04, 2016 04:42AM

Re: TLS session resumption (identifier)

B.R. March 04, 2016 04:58AM

Re: TLS session resumption (identifier)

Igor Sysoev March 04, 2016 05:20AM

Re: TLS session resumption (identifier)

B.R. March 04, 2016 05:32AM

Re: TLS session resumption (identifier)

Igor Sysoev March 04, 2016 05:40AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 273
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready