https://istlsfastyet.com/

lallysingh · on Sept 2, 2016

Of note:

TLS operational costs are still higher, right?

Not necessarily. Once you enable and optimize your TLS stack you're also well on your way to deploying HTTP/2. Unlike HTTP/1.1, HTTP/2 requires only a single connection per origin, which means fewer sockets, memory buffers, TLS handshakes, and so on. As a result, it may well be the case that you will be able to handle more users with fewer resources.

kuschku · on Sept 2, 2016

That applies to modern hardware and modern infrastructue – not to people in third world countries on decade old cheap hardware with barely working networks.

Dylan16807 · on Sept 2, 2016

Decade old hardware can do TLS fine. Barely working networks can do TLS just as well as they can do non-TLS.

kuschku · on Sept 2, 2016

Barely working networks tend to use custom caching systems where TLS accesses often taken dozens of times longer.

Dylan16807 · on Sept 2, 2016

They can always make the proxy explicit.