SSL session resumption (who knew, I didn’t)
Tags :Domino 7
Playing around with a client that wants absolutely
everything over SSL for web browsers. I had no idea this little gem
existed
SSL session resumption
greatly improves performance when using SSL by recalling information from
a previous successful SSL session negotiation to bypass the most computationally
intensive parts of the SSL session key negotiation. HTTP is the protocol
that benefits the most from SSL session resumption, but other Internet
protocols may benefit as well.
By default, the server caches information
from the 50 most recently negotiated sessions. This number can be modified
by setting the variable SSL_RESUMABLE_SESSIONS in the NOTES.INI file. Increasing
that number may improve performance on servers that tend to carry large
numbers of concurrent SSL sessions.
SSL session resumption can be disabled by setting SSL_RESUMABLE_SESSIONS=1 on the server.
SSL_RESUMABLE_SESSIONS has no effect on the Notes client. The Notes client will cache the most recent SSL session.
Note You cannot configure SSL sessions to time out and expire.
Let's give it a shot and see if the results are of benefit, will let you know
blog comments powered by Disqus
On Wednesday, April 27th, 2005 by Chris Miller
