{"id":21767,"date":"2014-05-08T10:03:45","date_gmt":"2014-05-08T08:03:45","guid":{"rendered":"https:\/\/mamchenkov.net\/wordpress\/?p=21767"},"modified":"2014-05-08T10:03:45","modified_gmt":"2014-05-08T08:03:45","slug":"is-tls-fast-yet","status":"publish","type":"post","link":"https:\/\/mamchenkov.net\/wordpress\/2014\/05\/08\/is-tls-fast-yet\/","title":{"rendered":"Is TLS Fast Yet?"},"content":{"rendered":"<!-- google_ad_section_start -->\n<p><a href=\"https:\/\/istlsfastyet.com\/\">Is TLS Fast Yet?<\/a><\/p>\n<blockquote><p>TLS has exactly one performance problem: it is not used widely enough. Everything else can be optimized.<\/p><\/blockquote>\n<!-- google_ad_section_end -->\n","protected":false},"excerpt":{"rendered":"<!-- google_ad_section_start -->\n<p>Is TLS Fast Yet? TLS has exactly one performance problem: it is not used widely enough. Everything else can be optimized.<\/p>\n<!-- google_ad_section_end -->\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"link","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"_links_to":"","_links_to_target":""},"categories":[1,62,1334],"tags":[1057,200],"keyring_services":[],"class_list":["post-21767","post","type-post","status-publish","format-link","hentry","category-general","category-technology","category-web-work","tag-performance","tag-security","post_format-post-format-link"],"aioseo_notices":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack-related-posts":[{"id":21768,"url":"https:\/\/mamchenkov.net\/wordpress\/2014\/05\/08\/on-tls-performance\/","url_meta":{"origin":21767,"position":0},"title":"On TLS performance","author":"Leonid Mamchenkov","date":"May 8, 2014","format":"quote","excerpt":"We have deployed TLS at a large scale using both hardware and software load balancers. We have found that modern software-based TLS implementations running on commodity CPUs are fast enough to handle heavy HTTPS traffic load without needing to resort to dedicated cryptographic hardware. We serve all of our HTTPS\u2026","rel":"","context":"In &quot;All&quot;","block_context":{"text":"All","link":"https:\/\/mamchenkov.net\/wordpress\/category\/general\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":28885,"url":"https:\/\/mamchenkov.net\/wordpress\/2018\/10\/25\/the-illustrated-tls-connection\/","url_meta":{"origin":21767,"position":1},"title":"The Illustrated TLS Connection","author":"Leonid Mamchenkov","date":"October 25, 2018","format":false,"excerpt":"\"The Illustrated TLS Connection\" is an interactive guide to the TLS connection, explaining every byte with code, comments, annotations, and more.\u00a0 If you ever wanted to know the details of how this works, I can't think of a better resource to direct you to.\u00a0 And if you find any issues\u2026","rel":"","context":"In &quot;All&quot;","block_context":{"text":"All","link":"https:\/\/mamchenkov.net\/wordpress\/category\/general\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/mamchenkov.net\/wordpress\/wp-content\/uploads\/2018\/10\/tls_illustrated-451x500.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":18411,"url":"https:\/\/mamchenkov.net\/wordpress\/2013\/06\/28\/google-adds-quic-protocol-to-latest-chrome-build-delivering-http-over-udp\/","url_meta":{"origin":21767,"position":2},"title":"Google adds QUIC protocol to latest Chrome build, delivering HTTP over UDP","author":"Leonid Mamchenkov","date":"June 28, 2013","format":"link","excerpt":"Google adds QUIC protocol to latest Chrome build, delivering HTTP over UDP Here are the QUIC highlights Google wants to emphasize right now: High security similar to TLS. Fast (often 0-RTT) connectivity similar to TLS Snapstart combined with TCP Fast Open. Packet pacing to reduce packet loss. Packet error correction\u2026","rel":"","context":"In &quot;All&quot;","block_context":{"text":"All","link":"https:\/\/mamchenkov.net\/wordpress\/category\/general\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":21759,"url":"https:\/\/mamchenkov.net\/wordpress\/2014\/05\/07\/http2-explained\/","url_meta":{"origin":21767,"position":3},"title":"http2 explained","author":"Leonid Mamchenkov","date":"May 7, 2014","format":"link","excerpt":"http2 explained - This document describes http2 at a technical and protocol level. Background, the protocol, the implementations and the future. Some highlights: The http2 spec is expected to ship in June 2014 (a month or two away!) http2 is heavily based on Google's SPDY http2 is binary http2 fixes\u2026","rel":"","context":"In &quot;All&quot;","block_context":{"text":"All","link":"https:\/\/mamchenkov.net\/wordpress\/category\/general\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":21567,"url":"https:\/\/mamchenkov.net\/wordpress\/2014\/04\/14\/ssl-labs-deploying-forward-secrecy\/","url_meta":{"origin":21767,"position":4},"title":"SSL Labs: Deploying Forward Secrecy","author":"Leonid Mamchenkov","date":"April 14, 2014","format":"link","excerpt":"SSL Labs: Deploying Forward Secrecy With revelations about mass surveillance in the news everywhere, an obscure feature of SSL\/TLS called\u00a0Forward Secrecy\u00a0has suddenly become very interesting. So what is it, and why is it so interesting now?","rel":"","context":"In &quot;All&quot;","block_context":{"text":"All","link":"https:\/\/mamchenkov.net\/wordpress\/category\/general\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":27586,"url":"https:\/\/mamchenkov.net\/wordpress\/2017\/05\/14\/haproxy-sni\/","url_meta":{"origin":21767,"position":5},"title":"HAProxy SNI","author":"Leonid Mamchenkov","date":"May 14, 2017","format":false,"excerpt":"\"HAProxy SNI\" is pure gold! If you want to have a load balancer for HTTPS traffic, without managing SSL certificates on the said load balancer, there is a way to do so. The approach is utilizing the Server Name Indication (SNI) extension to the TLS protocol. \u00a0I knew about it\u2026","rel":"","context":"In &quot;All&quot;","block_context":{"text":"All","link":"https:\/\/mamchenkov.net\/wordpress\/category\/general\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"jetpack_sharing_enabled":true,"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/posts\/21767","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/comments?post=21767"}],"version-history":[{"count":0,"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/posts\/21767\/revisions"}],"wp:attachment":[{"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/media?parent=21767"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/categories?post=21767"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/tags?post=21767"},{"taxonomy":"keyring_services","embeddable":true,"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/keyring_services?post=21767"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}