TLS Session Resumption: Full-speed and Secure
Feb 24, 2015Zi Lin
Summary
This post details Cloudflare's implementation of TLS session resumption (both Session IDs and Session Tickets) to improve the performance of Universal SSL. It explains the technical challenges of sharing session data across multiple hosts within a Point of Presence (PoP) and Cloudflare's solutions using memcached for Session IDs and a secure, rotated key distribution system for Session Tickets. The post highlights the performance benefits of session resumption, reducing handshake costs and improving user experience, especially for mobile users.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack