On Mon, Mar 21, 2011 at 8:21 AM, Daniel Kinzler daniel@brightbyte.de wrote:
In the hope i'm not clubbing a diseased donkey, i'd like to share an idea i ran across: we could use the RC4-128 cypher for secure.wikimedia.org, instead of AES256. RC4 is reportedly a lot faster (3 to 4 times the throughput). Since CPU capacity for encryption has been mentioned as one of the problems with making secure.wikimedia.org reliable, I thought it might help.
I was told that the real CPU cost is in setting up the connection, in Diffie-Hellman or RSA, not in the symmetric encryption once a shared secret is established.