Closed emanjon closed 1 year ago
I did a first replacement of the original figures, need more time to get / setup chains
2605:8d80:542:2747:915f:4c61:3122:9555
"*R<5S( 6JFA]O,4+B+^A<5V ,^XS5;;5
MO?7XZN#3=-XS:$.L*,0*'Q+ U%A]%=Z&'T
M-'H%G4)GT-<$!L&6X$4((T@)BP@J0CVABS!(V$GXB'"&<(TP37A*)!+Y1 $Q
MA)A$+"!6$)N)O<2MQ /$X\1+Q+O$61*)9$7R(D60TDDRDH'41=I"VD?ZC'29
M-$UZ3J:1' 5L+KMFA"!_$,
M[7+1F;@:8RQF,<@S^%_,>%GTMIE84#2@-6A.TM1 [;?&Z8]X_O ]6AH/.;=
M^OY ;=_[WDD@6V91 Q.!$0C)G)V^<>,>@K5?[,&2KED+5%[
MJM0$U#QLI#VL+J\)J*ZRM@ RYPJ_NU+]SO*DYK%?;X/7=#*XWT*)[>:,;]7-
MU0>J=S3R( TR8!2,AC'@@2Q9?R[DPWCIS#OP+DR B2:;*&-OR6>>9&-E5H[,
M,O#3K/>@0-Z38 I,A4(Y"B2>7,N,V/LFGPI%!JM)"V"C%Q\SU.I[L3LISH3F=ZB.U9*]BN
MP[9[("7%>PBW?P#K680=RY1QB>(@ZJ\!'SD1 PEA*5V_(]OGG"H.N$?08N]C
M(T7R_^7)WN($_),Y)M 5NDB/4D$J<(7BY8\9JA<4P2K9!)>UW7=M4N6+FMJ<
MU^"#+@A^.)[[>=/*Y4Q.C<,L9YL7T5WV%2I+9>IA3 (+$TF'%4A>.W#8DL]2
MM5Y QTDVB ,-H1G <3<.BI@ 4W73!_KWPMS"%U@42,6TN.[#E=G!I#4T6T:B
MDHP8285F#[W5W'_S5O.)/_I4F:4Y@3W\[NWWEY;^=N
!V_(% 13)851K)"T2C#:
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M HB-KKN#"_.O5\>M)^YL)+V?N39]RB+YULJ>D="A4/2
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M92;+#);I+--8IK),82EBF
It seems like real world use of TLS certificate compression will likely use Brotli. https://github.com/google/brotli
https://www.chromestatus.com/feature/5696925844111360 https://bugzilla.mozilla.org/show_bug.cgi?id=1548723
I think we should provide example with Brotli instead of zlib.
Certificate (chain) sizes is a real problem also in many non-IoT deployments.
https://www.fastly.com/blog/quic-handshake-tls-compression-certificates-extension-study https://tools.ietf.org/html/draft-ietf-emu-eaptlscert-08
I would like to see a matrix of example compressions:
RFC7925 ietf.org chain tools.ietf.org chain