Hacker News new | ask | show | jobs
by lmm 2345 days ago
Why do you want ECC specifically? Isn't that an implementation detail?
1 comments

From a performance point of view, ECC certs are significantly smaller than RSA certs at a comparable level of security.

Smaller certs translate to fewer bytes going over the wire when doing TLS handshakes, reducing latency.

But it was really their lack of HTTP/2 push support and how their CDNs don't support H2 prioritization correctly[1] which annoyed me to the point of going back to Digital Ocean and running my own instance of H2o where I have full control.[2]

1. https://github.com/andydavies/http2-prioritization-issues

2. https://h2o.examp1e.net/configure/http2_directives.html#http...

> Smaller certs translate to fewer bytes going over the wire when doing TLS handshakes, reducing latency.

Provided it fits into a single Ethernet frame it's not going to make any difference, right?