Timeline for What security benefits does ALPN bring to TLS?
Current License: CC BY-SA 3.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 12, 2017 at 11:59 | comment | added | Steffen Ullrich | @Polynomial: As I wrote: it reduces the number of round-trips if there is a need for application protocol selection since this selection can now be done inside the TLS handshake already. Like done with HTTP/2 vs. HTTP/1.x selection in the browsers. The "security benefit" might be because people discuss it together with HTTP/2 vs. HTTP/1.1 and the security benefit there is that most browsers implement HTTP/2 only when using TLS, thus kind of enforcing better security. | |
| Jan 12, 2017 at 11:52 | comment | added | Polynomial | "ALPN by itself does not offer any [...] speed improvements" - from what I've read, it reduces the number of round-trips in certain infrastructure setups, thus improving handshake latency. But perhaps you are right for the rest of it; it seems odd that people discuss it as a security benefit though. | |
| Jan 12, 2017 at 11:46 | history | answered | Steffen Ullrich | CC BY-SA 3.0 |