Automatic Key Exchange: faster, post-quantum secure origin handshakes for 45 billion daily connections (and counting)

发生了什么

Every time Cloudflare opens a new TLS 1.3 connection to an origin server, we have to make a guess: the protocol requires us to commit to a key agreement algorithm in the very first packet we send, before the origin has told us anything about itself or what it can support. If we guess right, the handshake completes in one round trip. Guess wrong, and the origin replies with a HelloRetryRequest , we start over, and th…

摘要按规则整理自下方来源原文

来源