[4843] in WWW Security List Archive

home help back first fref pref prev next nref lref last post

Re: Netscape-Enterprise/2.01 https SLOOOOWW

daemon@ATHENA.MIT.EDU (Adam Shostack)
Tue Mar 18 09:28:40 1997

From: Adam Shostack <adam@homeport.org>
In-Reply-To: <Pine.GSO.3.95.970317083849.4159F-100000@thebrain.aa.ans.net> from "Brian W. Spolarich" at "Mar 17, 97 08:42:40 am"
To: briansp@ans.net (Brian W. Spolarich)
Date: Tue, 18 Mar 1997 07:37:12 -0500 (EST)
Cc: fischer@ucet.ufl.edu, WWW-SECURITY@ns2.rutgers.edu
Errors-To: owner-www-security@ns2.rutgers.edu

	Is it off topic?  Isn't wwws an IETF wg on the subject?
Shouldn't we be concerned about the fact that there is no high
performance security mechanism for the web in any event?

	A lot of banks are using SSL right now.  Banks tend to have
long term relationships with their customers, and could probably do
a more occaisonal key exchange than is done in SSL, and use some form
of challenge/response system for day to day transactions.

	I know of at least one large bank in Boston that is planning
to roll out V-One's SmartGate software with Navigator because it does
exactly this.

Adam


Brian W. Spolarich wrote:
| 
|   Randy, I'd call Netscape tech support or post to secnews:netscape.server
| if you believe you're having problems.  The SSL handshake does degrade
| server performance significantly.  I believe I saw something to the effect
| that you get about 1/10th the performance with SSL connections.
| 
|   This posting is rather off-topic for www-security.
| 
|   -brian
| 
| On Sun, 16 Mar 1997, Randy Fischer wrote:
| 
| | I've just started working with a Netscape-Enterprise/2.01
| | server and am finding I get very poor performance 
| | when running securely against the https port compared
| | to the http port -- on the order of 3-5 times as long
| | to serve up a page.  This seems way too slow, I must
| | have misconfigured something.  Has anyone else seen
| | this problem?  I'm trying to find the bottleneck.
| | What are your experiences with performance tuning?
| | 
| | 					Randy Fischer
| | 
| 
| --
| Brian W. Spolarich - ANS Systems Development - briansp@ans.net - 313-677-7311
|                "More matter, with less art."  - Hamlet, II, ii
| 


-- 
"Well, that depends.  Do you mind the end of civilization as we know
it?"





home help back first fref pref prev next nref lref last post