search

igrigorik / istlsfastyet.com

Is TLS fast yet? Yes, yes it is.
https://istlsfastyet.com
421 stars 89 forks source link

Fastly supports TLS 1.3 and 0-RTT #210

Closed pbowyer closed 3 years ago

pbowyer commented 3 years ago

Press release and video: https://www.fastly.com/blog/tls13-available

0-RTT may class as "Yes" rather than "warn". Fastly say:

Fastly currently only supports 0-RTT between Fastly and requesting clients. We do not support 0-RTT between Fastly and your origin servers. By default, Fastly only answers idempotent requests (GET and HEAD requests without query parameters) over 0-RTT. This helps protect customer applications from replay attacks. Requests issued with 0-RTT will include an Early-Data:1 header per RFC 8470. This attribute can be queried and logged via VCL using req.http.early-data.

Closes #202