<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
On 03/22/2013 09:48 PM, From Ryan Sleevi:
<blockquote
cite="mid:CACvaWvacHELVo-LXHP5qBit7Y5XSctT4Zs3S1D9EN8wvPdyQRQ@mail.gmail.com"
type="cite">
<div dir="ltr">Every byte is critical during the critical SSL/TLS
handshake <br>
</div>
</blockquote>
<br>
As for me, security can't be traded for speed - no matter what - and
personally I don't care a bit (nor byte). My task isn't to make the
Internet faster (of course I love if it does), but whenever possible
more secure. What we are discussing has been in place as a basic and
in my opinion minimum mechanism to indicate a certificate's status.<br>
<br>
If speed is an issue lets work on making revocation check both
faster and more reliable by enabling hard fail.<br>
<br>
<br>
<div class="moz-signature">
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td colspan="2">Regards </td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
<tr>
<td>Signer: </td>
<td>Eddy Nigg, COO/CTO</td>
</tr>
<tr>
<td> </td>
<td><a href="http://www.startcom.org">StartCom Ltd.</a></td>
</tr>
<tr>
<td>XMPP: </td>
<td><a href="xmpp:startcom@startcom.org">startcom@startcom.org</a></td>
</tr>
<tr>
<td>Blog: </td>
<td><a href="http://blog.startcom.org">Join the Revolution!</a></td>
</tr>
<tr>
<td>Twitter: </td>
<td><a href="http://twitter.com/eddy_nigg">Follow Me</a></td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
</tbody>
</table>
</div>
<br>
<br>
</body>
</html>