Most of the cost for a high-traffic website is processing requests over SSL, not...

cmircea · on July 22, 2013

Really? SSL is dirt cheap to compute these days. Google saw a 1% increase in CPU usage when they made SSL mandatory for Gmail.

http://highscalability.com/blog/2011/2/10/dispelling-the-new...

https://www.imperialviolet.org/2010/06/25/overclocking-ssl.h...

hnha · on July 22, 2013

it depends on the cipher and your software, I had tremendous trouble with some free php forum stuff recently when it curled things with PFS.

cmircea · on July 22, 2013

AES is implemented in hardware now. RSA is cheap to compute; SHA1 is not even a factor. If you want forward secrecy, DON'T use DHE, use ECDHE; plain DHE is expensive.

To be fair nearly all PHP forum software is crap.