On: Forward Secrecy for Google HTTPS

[stock_toaster]

The post made it sound like just the bugfixes are in 1.0.0e, but the performance improvements may have not been accepted yet. I wonder if that is the case?

This is good to see, and I really appreciate the work google has put into making tls/ssl more pervasive.

I do wonder about the performance differences between their faster DHE implementation and what they were using before (RSA-RC4-SHA). I wish they had provided a bit of data on that.

[tptacek → stock_toaster]

It kind of has to be less performant, just because ECDHE uses more bignum crypto primitives.

[stock_toaster → tptacek]

Yeah, that makes sense.

I was mostly curious about how much faster their new implementation was over the old, and how much slower it was than RSA-RC4-SHA.

[marshray → stock_toaster]

I think that with the session resumptions they got by using session tickets, this could easily end up being a net gain for them.