Hacker News new | ask | show | jobs
by alwillis 2345 days ago
From a performance point of view, ECC certs are significantly smaller than RSA certs at a comparable level of security.

Smaller certs translate to fewer bytes going over the wire when doing TLS handshakes, reducing latency.

But it was really their lack of HTTP/2 push support and how their CDNs don't support H2 prioritization correctly[1] which annoyed me to the point of going back to Digital Ocean and running my own instance of H2o where I have full control.[2]

1. https://github.com/andydavies/http2-prioritization-issues

2. https://h2o.examp1e.net/configure/http2_directives.html#http...

1 comments

> Smaller certs translate to fewer bytes going over the wire when doing TLS handshakes, reducing latency.

Provided it fits into a single Ethernet frame it's not going to make any difference, right?