You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2011/07/14 09:12:52 UTC

DO NOT REPLY [Bug 51506] New: Support for TLS False Start

https://issues.apache.org/bugzilla/show_bug.cgi?id=51506

             Bug #: 51506
           Summary: Support for TLS False Start
           Product: Tomcat 7
           Version: unspecified
          Platform: PC
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Connectors
        AssignedTo: dev@tomcat.apache.org
        ReportedBy: shashank.shekhar.global@gmail.com
    Classification: Unclassified


https://tools.ietf.org/html/draft-bmoeller-tls-falsestart-00 describes a new
extension for reducing the overall roundtrip count in the TLS handshake by one.

Chrome 9+ has support for it and has seen a 30% improvement in latency. Firefox
has a ticket but is yet to prioritize it
(https://bugzilla.mozilla.org/show_bug.cgi?id=658222).

Supporting False Start from the server side will reduce the roundtrip count by
one during abridged TLS handshakes.

Does this involve waiting for Java's SSL implementation to add support for this
kind of handshake modification as well?

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


DO NOT REPLY [Bug 51506] Support for TLS False Start

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=51506

Mark Thomas <ma...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID
         OS/Version|                            |All

--- Comment #1 from Mark Thomas <ma...@apache.org> 2011-07-14 07:55:01 UTC ---
Tomcat does not implement SSL, it uses the JSSE implementation from the JVM
and/or OpenSSL. Once those implementations support this, Tomcat will use them
automatically.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


DO NOT REPLY [Bug 51506] Support for TLS False Start

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=51506

--- Comment #2 from Shashank Shekhar <sh...@gmail.com> 2011-07-14 17:57:03 UTC ---
Thanks for the clarification. I had a hunch, but it's good to see it getting
answered authoritatively.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org