Re: DAV is complicated and slow?

On 11/29/05, Joe Orton <joe@manyfish.co.uk> wrote:
> On Sun, Nov 27, 2005 at 07:41:44AM -0800, Justin Erenkrantz wrote:
> > --On November 27, 2005 10:12:03 AM +0000 Joe Orton <joe@manyfish.co.uk>
> > wrote:
> >
> > >You can't really pipeline over SSL - if you start sending request N + 1
> > >when the server wants to renegotiate after reading request N, you're
> > >stuffed.
> >
> > We could argue about that one. =)
>
> Using pipelining over SSL will break any server configuration requiring
> a per-location SSL renegotiation (for a client cert, etc), which is not
> something you want broken by default. (you can perhaps argue about
> whether this is a problem inherent in the TLS protocol or "merely" in
> the current implementations thereof)

Yuk! So, to pipeline SSL the client/server would need to know
that there is no difference in the authentication requirements for
all of the paths being passed in during the pipelining operation.
I have never built a system that had such constraints but I now
see how that would be a major issue with SSL pipelining...

The question would be if there was some way to start pipelining
and if the authentication requirements require a separate connection,
could that be requested for those requests (again, yuck!)

--
Michael Sinz               Technology and Engineering Director/Consultant
"Starting Startups"                          mailto:Michael.Sinz@sinz.org
My place on the web                      http://www.sinz.org/Michael.Sinz
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org