Hacker News new | ask | show | jobs
by jashkenas 5448 days ago
If that's the case ... then it's a real problem.

The mainstream argument lately has been that SSL is so minimally computationally intensive that it doesn't hurt to just use it by default for all of your traffic. If piping your traffic through SSL is so computationally intensive that it dominates your entire cross-webserver benchmark ... then the mainstream argument can't possibly be true.

1 comments

SSL is so minimally computationally intensive that it doesn't hurt to just use it by default for all of your traffic

May I ask where you got that from ?

SSL, or to be more accurate RSA, IS computationally intensive, but mostly at the establishment of the session (you cannot do millions of multiplications on a consumer grade CPU without expecting some delay and heat).

Once the connection is established, and can be reused/resumed, it's relatively cheap.