Chromium Blog: SSL FalseStart Performance Results

Chromium Blog

News and developments from the open source browser project

SSL FalseStart Performance Results

2011. május 18., szerda

Last year, Google’s Adam Langley, Nagendra Modadugu, and Bodo Moeller proposed SSL False Start, a client-side only change to reduce one round-trip from the SSL handshake.
We implemented SSL False Start in Chrome 9, and the results are stunning, yielding a significant decrease in overall SSL connection setup times. SSL False Start reduces the latency of a SSL handshake by 30%¹. That is a big number. And reducing the cost of a SSL handshake is critical as more and more content providers move to SSL.

Our biggest concern with implementing SSL False Start was backward compatibility. Although nothing in the SSL specification (also known as TLS) explicitly prohibits FalseStart, there was no easy way to know whether it would work with all sites. Speed is great, but if it breaks user experience for even a small fraction of users, the optimization is non-deployable.
To answer this question, we compiled a list of all known https websites from the Google index, and tested SSL FalseStart with all of them. The result of that test was encouraging: 94.6% succeeded, 5% timed out, and 0.4% failed. The sites that timed out were verified to be sites that are no longer running, so we could ignore them.
To investigate the failing sites, we implemented a more robust check to understand how the failures occurred. We disregarded those sites that failed due to certificate failures or problems unrelated to FalseStart. Finally, we discovered that the sites which didn’t support FalseStart were using only a handful of SSL vendors. We reported the problem to the vendors, and most have fixed it already, while the others have fixes in progress. The result is that today, we have a manageable, small list of domains where SSL FalseStart doesn’t work, and we’ve added them to a list within Chrome where we simply won’t use FalseStart. This list is public and posted in the chromium source code. We are actively working to shrink the list and ultimately remove it.
All of this represents a tremendous amount of work with a material gain for Chrome SSL users. We hope that the data will be confirmed by other browser vendors and adopted more widely.¹Measured as the time between the initial TCP SYN packet and the end of the TLS handshake.
Posted by Mike Belshe, Software Engineer

Google

Címkék: chromium , security , ssl

Címkék

$200K 1
10th birthday 4
abusive ads 1
abusive notifications 2
accessibility 3
ad blockers 1
ad blocking 2
advanced capabilities 1
android 2
anti abuse 1
anti-deception 1
background periodic sync 1
badging 1
benchmarks 1
beta 83
better ads standards 1
billing 1
birthday 4
blink 2
browser 2
browser interoperability 1
bundles 1
capabilities 6
capable web 1
cds 1
cds18 2
cds2018 1
chrome 35
chrome 81 1
chrome 83 2
chrome 84 2
chrome ads 1
chrome apps 5
Chrome dev 1
chrome dev summit 1
chrome dev summit 2018 1
chrome dev summit 2019 1
chrome developer 1
Chrome Developer Center 1
chrome developer summit 1
chrome devtools 1
Chrome extension 1
chrome extensions 3
Chrome Frame 1
Chrome lite 1
Chrome on Android 2
chrome on ios 1
Chrome on Mac 1
Chrome OS 1
chrome privacy 4
chrome releases 1
chrome security 10
chrome web store 32
chromedevtools 1
chromeframe 3
chromeos 4
chromeos.dev 1
chromium 9
cloud print 1
coalition 1
coalition for better ads 1
contact picker 1
content indexing 1
cookies 1
core web vitals 2
cumulative layout shift 1
custom tabs 1
csrf 1
css 1
dart 8
dashboard 1
Data Saver 3
Data saver desktop extension 1
day 2 1
deceptive installation 1
declarative net request api 1
design 2
developer dashboard 1
Developer Program Policy 2
developer website 1
devtools 13
digital event 1
discoverability 1
DNS-over-HTTPS 4
DoH 4
emoji 1
emscriptem 1
enterprise 1
extensions 27
Fast badging 1
faster web 1
features 1
feedback 2
field data 1
first input delay 1
Follow 1
fonts 1
form controls 1
frameworks 1
fugu 2
fund 1
funding 1
gdd 1
google earth 1
google event 1
google io 2019 1
google web developer 1
googlechrome 12
harmful ads 1
html5 11
HTTP/3 1
HTTPS 4
iframes 1
images 1
incognito 1
insecure forms 1
intent to explain 1
ios 1
ios Chrome 1
issue tracker 3
jank 1
javascript 5
lab data 1
labelling 1
largest contentful paint 1
launch 1
lazy-loading 1
lighthouse 2
linux 2
Lite Mode 2
Lite pages 1
loading interventions 1
loading optimizations 1
lock icon 1
long-tail 1
mac 1
manifest v3 2
metrics 2
microsoft edge 1
mixed forms 1
mobile 2
na 1
native client 8
native file system 1
New Features 5
notifications 1
octane 1
open web 4
origin trials 2
pagespeed insights 1
pagespeedinsights 1
passwords 1
payment handler 1
payment request 1
payments 2
performance 20
performance tools 1
permission UI 1
permissions 1
play store 1
portals 3
prefetching 1
privacy 2
privacy sandbox 4
private prefetch proxy 1
profile guided optimization 1
progressive web apps 2
Project Strobe 1
protection 1
pwa 1
QUIC 1
quieter permissions 1
releases 3
removals 1
rlz 1
root program 1
safe browsing 2
Secure DNS 2
security 36
site isolation 1
slow loading 1
sms receiver 1
spam policy 1
spdy 2
spectre 1
speed 4
ssl 2
store listing 1
strobe 2
subscription pages 1
suspicious site reporter extension 1
TCP 1
the fast and the curious 23
TLS 1
tools 1
tracing 1
transparency 1
trusted web activities 1
twa 2
user agent string 1
user data policy 1
v8 6
video 2
wasm 1
web 1
web apps 1
web assembly 2
web developers 1
web intents 1
web packaging 1
web payments 1
web platform 1
web request api 1
web vitals 1
web.dev 1
web.dev live 1
webapi 1
webassembly 1
webaudio 3
webgl 7
webkit 5
WebM 1
webmaster 1
webp 5
webrtc 6
websockets 5
webtiming 1
writable-files 1
yerba beuna center for the arts 1

Archive

2024
- dec.
- aug.
- jún.
- máj.
- ápr.
- márc.
- febr.

2023
- nov.
- okt.
- szept.
- aug.
- jún.
- máj.
- ápr.
- febr.

2022
- dec.
- szept.
- aug.
- jún.
- máj.
- ápr.
- márc.
- febr.
- jan.

2021
- dec.
- nov.
- okt.
- szept.
- aug.
- júl.
- jún.
- máj.
- ápr.
- márc.
- febr.
- jan.

2020
- dec.
- nov.
- okt.
- szept.
- aug.
- júl.
- jún.
- máj.
- ápr.
- márc.
- febr.
- jan.

2019
- dec.
- nov.
- okt.
- szept.
- aug.
- júl.
- jún.
- máj.
- ápr.
- márc.
- febr.
- jan.

2018
- dec.
- nov.
- okt.
- szept.
- aug.
- júl.
- jún.
- máj.
- ápr.
- márc.
- febr.
- jan.

2017
- dec.
- nov.
- okt.
- szept.
- aug.
- júl.
- jún.
- máj.
- ápr.
- márc.
- febr.
- jan.

2016
- dec.
- nov.
- okt.
- szept.
- aug.
- jún.
- máj.
- ápr.
- márc.
- febr.
- jan.

2015
- dec.
- nov.
- okt.
- szept.
- aug.
- júl.
- jún.
- máj.
- ápr.
- márc.
- febr.
- jan.

2014
- dec.
- nov.
- okt.
- szept.
- aug.
- júl.
- jún.
- máj.
- ápr.
- márc.
- febr.
- jan.

2013
- dec.
- nov.
- okt.
- szept.
- aug.
- júl.
- jún.
- máj.
- ápr.
- márc.
- febr.
- jan.

2012
- dec.
- nov.
- okt.
- szept.
- aug.
- júl.
- jún.
- máj.
- ápr.
- márc.
- febr.
- jan.

2011
- dec.
- nov.
- okt.
- szept.
- aug.
- júl.
- jún.
- máj.
- ápr.
- márc.
- febr.
- jan.

2010
- dec.
- nov.
- okt.
- szept.
- aug.
- júl.
- jún.
- máj.
- ápr.
- márc.
- febr.
- jan.

2009
- dec.
- nov.
- szept.
- aug.
- júl.
- jún.
- máj.
- ápr.
- márc.
- febr.
- jan.

2008
- dec.
- nov.
- okt.
- szept.

Feed

Give us feedback in our Product Forums.

Google
Privacy
Terms