![]() ![]() ![]() |
|
Please support Geekzone by subscribing, or using one of our referral links: Samsung | AliExpress | Wise | Sharesies | Hatch | GoodSync | Backblaze backup
Sales Engineer
Snowflake
www.snowflake.com
about.me/nzregs
Twitter: @nzregs
---
James Sleeman
I sell lots of stuff for electronic enthusiasts...
lyonrouge: Thanks, that's more in my price range (all this just to see if it address an Office / SharePoint issue :-). I just noticed that Geekzone HTTPS is redirecting me to HTTP?
Sales Engineer
Snowflake
www.snowflake.com
about.me/nzregs
Twitter: @nzregs
Regs:lyonrouge: Thanks, that's more in my price range (all this just to see if it address an Office / SharePoint issue :-). I just noticed that Geekzone HTTPS is redirecting me to HTTP?
HTTPS hammers performance on your web server or ssl appliance. no point in wrapping forum posts in SSL - login is all that really needs protections.
Ragnor:Regs:lyonrouge: Thanks, that's more in my price range (all this just to see if it address an Office / SharePoint issue :-). I just noticed that Geekzone HTTPS is redirecting me to HTTP?
HTTPS hammers performance on your web server or ssl appliance. no point in wrapping forum posts in SSL - login is all that really needs protections.
HTTPS is not computationally expensive with semi modern hardware, the problem is latency or delay due to the the back and forth handshake process for authentication. If you have http keep alive on this only happens once though.
Not using https for your entire session enable's man in the middle (eg: when using using cafe, hotel or public wireless) cookie jacking, remember Firesheep! This is why banking sites and even gmail use https the whole time.
Google implements TLS False Start in their Chrome web browser so the browser starts sending data before the handshake is completed to get around this problem.
They also implement TLS Snap Start on the web server, which means google apps that use https the whole time don't suffer as much latency downside.
http://blog.chromium.org/2011/05/ssl-falsestart-performance-results.html
http://blog.httpwatch.com/2011/01/28/top-7-myths-about-https/
|
![]() ![]() ![]() |