Website Security & Threat Management
TLS Session Resumption: Full-speed and Secure

TLS Session Resumption: Full-speed and Secure

2/24/2015 · Zi Lin

What this post added

This post details Cloudflare's implementation of TLS session resumption (both Session IDs and Session Tickets) to improve the performance of Universal SSL. It explains the technical challenges of sharing session data across multiple hosts within a Point of Presence (PoP) and Cloudflare's solutions using memcached for Session IDs and a secure, rotated key distribution system for Session Tickets. The post highlights the performance benefits of session resumption, reducing handshake costs and improving user experience, especially for mobile users.

Read the original post ↗