Re: HTTP is just fine

On 11/20/15 6:49 AM, Hubert Kario wrote:
> see for yourself:
> http://www.httpvshttps.com/

Uh...  That test compares HTTP/1.1 (unencrypted) against HTTP/2.0 over SSL.

What it really shows is that a properly configured HTTP/2.0 server can 
be much faster for serving lots of small requests than an HTTP/1.1 
server, which is not surprising: that was one of the main design goals 
of HTTP/2.0.  But that tells you nothing about "https vs http" per se, 
unless you're actually running an http/2.0 server.  And none of this has 
anything to do with your claim about "middle boxes".

An apples to apples comparison here would be plain HTTP/1.1 against 
HTTP/1.1 over SSL, and I would be quite interested in data that shows a 
performance win for SSL there.  That would support your "middle box" claim.

As it is, I'm not sure whether you're being misled or disingenuous.

-Boris

P.S.  I'm all in favor of transitioning everything to SSL, by the way. 
I just think lying to people is not a great way to convince them to do 
something.