通过跨主机名的TLS恢复增强加密Web的性能
Enhanced Performance for the encrypted Web through TLS Resumption across Hostnames
摘要：
TLS可以通过简化的恢复握手来恢复以前的连接，从而显著降低延迟并节省昂贵的加密操作。为此，重复使用来自先前连接的加密TLS状态。TLS 1.3版建议在连接到不同的主机名时避免恢复握手，从而避免重复使用加密状态。在这项工作中，我们重新评估了这一建议，因为我们发现跨主机名共享加密TLS状态是网络上的常见做法。我们提出了一个TLS扩展，允许服务器通知客户端TLS状态与其他主机名共享。此信息使客户端能够跨主机名有效地恢复TLS会话。我们的评估表明，我们的TLS扩展为Web提供了巨大的性能提升。例如，在网络上检索一个普通网站所需的20.24次完整TLS握手中，约有58.7%可以转换为恢复的连接建立。这使得TLS连接建立所消耗的CPU时间减少了44%。此外，我们的TLS扩展将与普通网站的连接建立速度提高了30.6%（TLS 1.3）。因此，我们的建议显着降低了加密网络的（能源）成本和延迟开销。
英文摘要：
TLS can resume previous connections via abbreviated resumption handshakes that significantly decrease the delay and save expensive cryptographic operations. For that, cryptographic TLS state from previous connections is reused. TLS version 1.3 recommends to avoid resumption handshakes, and thus the reuse of cryptographic state, when connecting to a different hostname. In this work, we reassess this recommendation, as we find that sharing cryptographic TLS state across hostnames is a common practice on the web. We propose a TLS extension that allows the server to inform the client about TLS state sharing with other hostnames. This information enables the client to efficiently resume TLS sessions across hostnames. Our evaluation indicates that our TLS extension provides huge performance gains for the web. For example, about 58.7% of the 20.24 full TLS handshakes that are required to retrieve an average website on the web can be converted to resumed connection establishments. This yields to a reduction of 44% of the CPU time consumed for TLS connection establishments. Furthermore, our TLS extension accelerates the connection establishment with an average website by up to 30.6% for TLS 1.3. Thus, our proposal significantly reduces the (energy) costs and the delay overhead in the encrypted web.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
