Re:Why HTTPS for Everything?
by umanwizard on Monday January 02, 2017 @02:56PM
(#13303896)
1 extra round trip is a lot when your users are on shitty connections in India. 0 extra round trips for servers the client has connected to before doesn't matter when most of your users are first-time visitors.
Not to mention that TLS 1.3 isn't supported on IE8, a complete deal-breaker for things I've worked on.
TLS 1.3 also supports 0-RTT connections for servers the client has connected to before using a static "pre-shared key". There is some additional vulnerability to replay attacks (newly introduced with 0-RTT) and loss of forward secrecy (the same as 1-RTT session resumption in TLS 1.2) of the application data sent in the initial ClientHello. The rest of the data sent in the connection has the full set of TLS security guarantees. The pre-shared key approach has less overhead for servers and a simpler synchronization problem for load-balancers than the session IDs and session cookies of TLS 1.2.
See, e.g., https://blog.cloudflare.com/tls-1-3-overview-and-q-and-a/ for more.