Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable TLS certificate compression #4545

Open
rucoder opened this issue Jan 24, 2025 · 2 comments
Open

Enable TLS certificate compression #4545

rucoder opened this issue Jan 24, 2025 · 2 comments

Comments

@rucoder
Copy link
Contributor

rucoder commented Jan 24, 2025

Proposal

In order to minimize network traffic during TLS handshake Certificate TLS compression can be enabled on both client and server side. It is defined in RFC 8879.
As per 24.01.25 neither popular HTTP servers e.g. nginx nor Go TLS client support this feature out of the box. The issue is a placeholder to gather information

  1. Open SSL supports is since 3.2 Alpha 1 https://openssl-library.org/post/2023-09-07-ossl32a1/
  2. nginx ticket that tracks the feature request https://trac.nginx.org/nginx/ticket/2546
  3. Golang issue crypto/tls: add support for Certificate Compression (RFC 8879) golang/go#42967

Some example implementations

  1. Implement certificate compression  getlantern/utls#15

Status in Rust

  1. rustls supports it already.
@shjala
Copy link
Member

shjala commented Jan 24, 2025

How much traffic is saved?

@rucoder
Copy link
Contributor Author

rucoder commented Jan 28, 2025

How much traffic is saved?

depends on certificate chain size which may be very big in some cases

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants