Welcome! Log In Create A New Profile

Advanced

Re: TLS session resumption (identifier)

March 04, 2016 05:40AM
On 04 Mar 2016, at 13:30, B.R. <reallfqq-nginx@yahoo.fr> wrote:

> On Fri, Mar 4, 2016 at 11:19 AM, Igor Sysoev <igor@sysoev.ru> wrote:
> Sorry, I meant there is no performance difference between “none” and “off” settings.
>
> ​Well, the client believes he should remember every session ID and store it somewhere for nothing, reading/resending/writing it on every connection.
> Small enough network traffic difference, though (the extra, useless ID in the ClientHello message could be considered harmless, even though those extra bytes appear on each TLS session establishment).

I believe this is negligible degradation for a client. These operations can be only noticeable
on server which serves a lot of simultaneous clients.

> As to default value, builtin session cache was by default initially but it turned out that
> it leads to memory fragmentation. So the default value has been changed to “off” and
> later to “none”.
>
> Of course shared cache is certainly better as default value but there is no good understanding
> what default cache size should be used. And now it becomes less important with ticket introduction.
>
> Total agreement there: I was not pushing for a default activating a cache, but rather for the clean 'off' setting.​
> ---
> B. R.



--
Igor Sysoev
http://nginx.com

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

TLS session resumption (identifier)

B.R. March 03, 2016 06:52AM

Re: TLS session resumption (identifier)

Maxim Dounin March 03, 2016 08:30AM

Re: TLS session resumption (identifier)

B.R. March 03, 2016 10:44AM

Re: TLS session resumption (identifier)

Igor Sysoev March 03, 2016 10:50AM

Re: TLS session resumption (identifier)

B.R. March 04, 2016 04:22AM

Re: TLS session resumption (identifier)

Igor Sysoev March 04, 2016 04:42AM

Re: TLS session resumption (identifier)

B.R. March 04, 2016 04:58AM

Re: TLS session resumption (identifier)

Igor Sysoev March 04, 2016 05:20AM

Re: TLS session resumption (identifier)

B.R. March 04, 2016 05:32AM

Re: TLS session resumption (identifier)

Igor Sysoev March 04, 2016 05:40AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 141
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready