Re: [Internet]Re: JEP Review Request: TLS Certificate Compression

2022-04-13 Thread xueleifan(XueleiFan)
022 10:01:29 PM An: xueleifan(XueleiFan) mailto:xuelei...@tencent.com>> Cc: OpenJDK Dev list mailto:security-dev@openjdk.java.net>> Betreff: Re: JEP Review Request: TLS Certificate Compression I like the idea of implementing certificate compression. Only one concern: TLS handshakes

Re: [Internet]Re: JEP Review Request: TLS Certificate Compression

2022-04-13 Thread xueleifan(XueleiFan)
Hi Daniel, Actually, I’m considering the improvement, by using cached compressed certificates, for the implementation. The solution is not straightforward yet to me. But it is a direction I will consider seriously. Thanks, Xuelei > On Apr 13, 2022, at 1:01 PM, Daniel Jeliński wrote: > > I

Re: JEP Review Request: TLS Certificate Compression

2022-04-13 Thread Bernd Eckenfels
13, 2022 10:01:29 PM An: xueleifan(XueleiFan) Cc: OpenJDK Dev list Betreff: Re: JEP Review Request: TLS Certificate Compression I like the idea of implementing certificate compression. Only one concern: TLS handshakes are generally a CPU-intensive operation, and certificate compression

Re: JEP Review Request: TLS Certificate Compression

2022-04-13 Thread Daniel Jeliński
I like the idea of implementing certificate compression. Only one concern: TLS handshakes are generally a CPU-intensive operation, and certificate compression / decompression will only make it worse. Will it be possible to compress a certificate once and use it across multiple handshakes? Decompres

Re: [Internet]Re: JEP Review Request: TLS Certificate Compression

2022-04-13 Thread xueleifan(XueleiFan)
Ping … Xuelei > On Mar 24, 2022, at 1:05 PM, Sean Mullan wrote: > > > > On 3/21/22 11:49 AM, xueleifan(XueleiFan) wrote: >> Hi, >> >> >> The JDK Enhancement Proposal, TLS Certificate Compression, has been opened >> for community review. Detailed, please refer to the draft: >> >> https://

Re: JEP Review Request: TLS Certificate Compression

2022-03-24 Thread Sean Mullan
On 3/21/22 11:49 AM, xueleifan(XueleiFan) wrote: Hi, The JDK Enhancement Proposal, TLS Certificate Compression, has been opened for community review.  Detailed, please refer to the draft: https://bugs.openjdk.java.net/browse/JDK-8281710 Or a more readable version at https://openjdk.java

Re: [Internet]Re: Re: JEP Review Request: TLS Certificate Compression

2022-03-07 Thread xueleifan(XueleiFan)
Thank you for the suggestion, Sean. Hi all, please discuss the proposal in the new thread: https://mail.openjdk.java.net/pipermail/security-dev/2022-March/029242.html Xuelei > On Mar 7, 2022, at 10:16 AM, Sean Mullan wrote: > > Hi Xuelei, > > Please start this discussion in a new thread w

Re: [Internet]Re: JEP Review Request: TLS Certificate Compression

2022-03-07 Thread Sean Mullan
Hi Xuelei, Please start this discussion in a new thread with a new subject (ex: Proposal for potential new feature: TLS Certificate Compression) as it should be evaluated on its own prior to reaching consensus and deciding if a JEP should be drafted. Also, keep in mind that it may take a few

Re: [Internet]Re: JEP Review Request: TLS Certificate Compression

2022-02-28 Thread xueleifan(XueleiFan)
Hi, It may be better to have more detail here, rather than refer you to the draft JEP. The first question maybe, if TLS Certificate Compression is something we want it in OpenJDK? The TLS Certificate Compression standard was described in RFC 8879, and has been enabled in browser Chrome and Sa

Re: JEP Review Request: TLS Certificate Compression

2022-02-28 Thread xueleifan(XueleiFan)
Hi, Could I have this JEP reviewed? One or more qualified Committers review is required to move it forward. Here is the PR if you want to have a further look at the implementation and test: https://github.com/openjdk/jdk/pull/7599 Thanks, Xuelei On Feb 15, 2022, at 9:30 PM, xueleifan(Xue