且构网

分享程序员开发的那些事...
且构网 - 分享程序员编程开发的那些事

在具有安全会话cookie的HTTP和HTTPS页面之间切换

更新时间:2023-08-18 16:22:46

一个更简单的选择:它一直是越来越多的接受使用TLS的替代方法,而不是在安全和不安全的连接之间来回切换。额外的处理时间大部分用于设置安全通道,但这只能执行一次并缓存(通常)。后续流量的对称加密在现代处理器上非常快速。有些过时的想法认为这将导致服务器开销或可扩展性问题。

A simpler alternative: It is becoming an increasingly accepted alternative to use TLS all the time, rather than switching back and forth between secure and unsecure connections. The bulk of additional processing time is spent setting up the secure tunnel, but this is only done once and cached (typically). The symmetric encryption of subsequent traffic is very, very fast on modern processors. It's somewhat out-of-date thinking to believe that this would cause a server overhead or scalability issue.

在最近的一篇博文中,Google工程师报告说,当他们切换对于Gmail,仅针对Gmail,他们发现他们的服务器窃听只增加了4%。 (找不到引文。)

In a recent blog post, a Google engineer reported that when they switched to HTTPS-only for GMail, they found their server overheard increased by only 4%. (Can't find the citation.)