February 2011 - Entrust, Inc. 1-3 of 3

HTTPS Performance Tuning

February 14, 2011 by Bruce Morton
Following up my last post, “SSL is not computationally expensive anymore,” I noticed Google is still using a 1024-bit RSA certificate for Gmail. I did some digging and confirmed that the performance hit of using a 2048-bit RSA key is about five times that of 1024-bit key. So this could create a 5-10 percent load [Read More...]

SSL is not computationally expensive anymore

February 7, 2011 by Bruce Morton
A recurring theme in this blog is proper SSL deployment [1] [2] [3]. One of the push backs that we hear is that SSL brings a lot of overhead, so it only gets deployed when absolutely necessary. Well, that myth was busted about a year ago when Google switched of Gmail to HTTPS. An article [Read More...]

Nice Try Facebook

February 2, 2011 by Bruce Morton
The good news? Facebook is enabling you to experience their social media site entirely over HTTPS. The bad news is that HTTPS is not turned on by default. So if you want HTTPS, then you will have to figure it out yourself. Although probably already in the works when Firesheep was released, it appears that [Read More...]