On: A UK ISP which is fighting against censorship

[cmircea]

Really? SSL is dirt cheap to compute these days. Google saw a 1% increase in CPU usage when they made SSL mandatory for Gmail.

http://highscalability.com/blog/2011/2/10/dispelling-the-new...

https://www.imperialviolet.org/2010/06/25/overclocking-ssl.h...

[hnha → cmircea]

it depends on the cipher and your software, I had tremendous trouble with some free php forum stuff recently when it curled things with PFS.

[cmircea → hnha]

AES is implemented in hardware now. RSA is cheap to compute; SHA1 is not even a factor. If you want forward secrecy, DON'T use DHE, use ECDHE; plain DHE is expensive.

To be fair nearly all PHP forum software is crap.