The Case for Prefetching and Prevalidating TLS Server Certificates

Author(s): Emily Stark, Lin-Shung Huang, Dinesh Israni, Collin Jackson and Dan Boneh

Download: Paper (PDF)

Date: 8 Feb 2012

Document Type: Briefing Papers

Additional Documents: Slides

Associated Event: NDSS Symposium 2012

Abstract:

By prefetching and prevalidating server certificates, web browsers can enable TLS handshakes with zero round trips that are up to four times faster than a normal handshake. This proposal improves web security by allowing more time for certificate validation and making it less costly for websites to enable TLS.