- From: Nico Williams <nico@cryptonector.com>
- Date: Sun, 10 Feb 2013 20:09:15 -0600
- To: Poul-Henning Kamp <phk@phk.freebsd.dk>
- Cc: Zhong Yu <zhong.j.yu@gmail.com>, Julian Reschke <julian.reschke@gmx.de>, "Martin J. Dürst" <duerst@it.aoyama.ac.jp>, James M Snell <jasnell@gmail.com>, "ietf-http-wg@w3.org" <ietf-http-wg@w3.org>
... sounds like an oxymoron. HOWEVER, we can probably use a combination of server-side state stored [encrypted] in state cookies, small session identifiers, and server-side caching of state cookies. Clients would normally only send the [small] session IDs, and would send the cookies only when the server needs them to [re-]establish state after it falls off the server's cache. On Sun, Feb 10, 2013 at 6:15 PM, Poul-Henning Kamp <phk@phk.freebsd.dk> wrote: > [1] We can probably do much more for transmission efficiency by killing > cookies and adding client provided session-identifieres, than any > kind of encoding or compression will ever be able to...[2]
Received on Monday, 11 February 2013 02:09:39 UTC