Improving the Performance and Privacy of TCP Fast Open, TLS 1.3, and QUIC

No ratings

Presented at Elbsides 2019 by

Erik Sy

The delay of the connection establishment of modern HTTPS protocol stacks presents a performance bottleneck for web browsing. Furthermore, performance-optimizations such as TLS session resumption present a performance versus user privacy tradeoff. In this talk, we discuss severe privacy issues of state-of-the-art HTTPS protocols stacks such as the kernel-based tracking mechanism using TCP Fast Open cookies. Subsequently, we present evaluation results indicating mechanisms such as out-of-band address validation tokens for QUIC that allow further performance improvements for the connection establishment on the web.