[prev in list] [next in list] [prev in thread] [next in thread] 

List:       subversion-dev
Subject:    Re: DAV is complicated and slow?
From:       Michael Sinz <Michael.Sinz () sinz ! org>
Date:       2005-11-29 13:56:19
Message-ID: 76a4e4ba0511290556h67e987cbw7ee29f5302607fe4 () mail ! gmail ! com
[Download RAW message or body]

On 11/29/05, Joe Orton <joe@manyfish.co.uk> wrote:
> On Sun, Nov 27, 2005 at 07:41:44AM -0800, Justin Erenkrantz wrote:
> > --On November 27, 2005 10:12:03 AM +0000 Joe Orton <joe@manyfish.co.uk>
> > wrote:
> >
> > >You can't really pipeline over SSL - if you start sending request N + 1
> > >when the server wants to renegotiate after reading request N, you're
> > >stuffed.
> >
> > We could argue about that one.  =)
>
> Using pipelining over SSL will break any server configuration requiring
> a per-location SSL renegotiation (for a client cert, etc), which is not
> something you want broken by default.  (you can perhaps argue about
> whether this is a problem inherent in the TLS protocol or "merely" in
> the current implementations thereof)

Yuk!  So, to pipeline SSL the client/server would need to know
that there is no difference in the authentication requirements for
all of the paths being passed in during the pipelining operation.
I have never built a system that had such constraints but I now
see how that would be a major issue with SSL pipelining...

The question would be if there was some way to start pipelining
and if the authentication requirements require a separate connection,
could that be requested for those requests (again, yuck!)

--
Michael Sinz               Technology and Engineering Director/Consultant
"Starting Startups"                          mailto:Michael.Sinz@sinz.org
My place on the web                      http://www.sinz.org/Michael.Sinz

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org


[prev in list] [next in list] [prev in thread] [next in thread]