TLS证书与QUIC性能的相互影响
On the Interplay between TLS Certificates and QUIC Performance
摘要：
在本文中，我们将重新审视QUIC连接设置的性能，并将快速安全连接的设计选择与常见的Web部署联系起来。我们分析了超过1M的Web域与272K QUIC启用的服务，发现两个令人担忧的结果。首先，当前创建、提供和获取Web证书的实践破坏了连接设置期间减少的往返时间，因为35%的服务器证书的大小超过了放大限制。其次，非标准的服务器实现会导致比QUIC允许的更大的放大系数，这在IP欺骗场景中会进一步增加。我们为所有相关利益攸关方提供指导，以改善这种情况。
英文摘要：
In this paper, we revisit the performance of the QUIC connection setup and relate the design choices for fast and secure connections to common Web deployments. We analyze over 1M Web domains with 272k QUIC-enabled services and find two worrying results. First, current practices of creating, providing, and fetching Web certificates undermine reduced round trip times during the connection setup since sizes of 35% of server certificates exceed the amplification limit. Second, non-standard server implementations lead to larger amplification factors than QUIC permits, which increase even further in IP spoofing scenarios. We present guidance for all involved stakeholders to improve the situation.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
