Botching Forward Secrecy - The sad state of server-side TLS Session Resumption implementationsAfter you finished reading this one, please also read the follow-up post that covers session resumption changes in TLS 1.3. The probably oldest complaint about TLS is that its handshake is slow and together with the transport encryption has a lot of CPU overhead. This certainly is not true anymore if configured correctly. One of the most important features to improve user experience for visitors a
