News for hackers. Stuff that matters.

A comment on Does my site need HTTPS?. Parent comment

Re:Does my site need HTTPS? by kadoban on Monday January 31, 2022 @10:50PM (#30158414)
That's a lot of overhead. There's no way that's right for anything like common behavior/content.
[ Parent | on HN ]
Re:Does my site need HTTPS? by dreamsbythelake on Tuesday February 01, 2022 @02:07AM (#30159486)
Yes, I was also surprised to see that. Just opened TLS website in Firefox, Inspect->Network->site's home page->Timings. -> TLS Setup: 84ms, content generation+wait+receiving: 30ms ... Fun, huh? :-)

/e: non-CDN site, hosted on EC2, safe ciphers+hash algos without crypto HW accelerators etc. Average business website. With WordPress it is even worse. The CDN lets us terminate TLS and fetch origin in plain text + optimisations on crypto etc.

[ Parent | on HN ]