Skip to Content.
Sympa Menu

per-entity - RE: [Per-Entity] HTTPS transport and TLS trust

Subject: Per-Entity Metadata Working Group

List archive

RE: [Per-Entity] HTTPS transport and TLS trust


Chronological Thread 
  • From: Paul Caskey <>
  • To: "" <>
  • Cc: "" <>, David Walker <>
  • Subject: RE: [Per-Entity] HTTPS transport and TLS trust
  • Date: Wed, 7 Sep 2016 00:16:06 +0000
  • Accept-language: en-US
  • Authentication-results: spf=none (sender IP is ) ;
  • Ironport-phdr: 9a23:72JOYRBC1A+bXiJGa9URUyQJP3N1i/DPJgcQr6AfoPdwSP77osbcNUDSrc9gkEXOFd2Crakb26yL6Ou5BCQp2tWojjMrSNR0TRgLiMEbzUQLIfWuLgnFFsPsdDEwB89YVVVorDmROElRH9viNRWJ+iXhpRZbIBj0NBJ0K+LpAcaSyp3vj6Hhs6HUNk9Thz2naLV+JT25qAzQso8dho4oYvIqyRzTq31EcsxZwGppIRSYmBOqtemq+5s2yy1Nv7oK/tVDXLSyK7wzRKdbASUOMmYp6dftuAWZCwaD+y1PAS0tjhNUDl2dv1nBVZDrv36/77Il1Q==
  • Spamdiagnosticmetadata: NSPM
  • Spamdiagnosticoutput: 1:99

Well, there's the latency concern again.

It's not about HA; we don't need a CDN for HA.



-----Original Message-----
From: Scott Koranda []
Received: Tuesday, 06 Sep 2016, 6:32PM
To: Paul Caskey []
CC: David Walker []; []
Subject: Re: [Per-Entity] HTTPS transport and TLS trust

> To the extent that's true, then I would question the need
> for a CDN, as opposed to a normal highly-available
> infrastructure (which would be less expensive to operate).

I do want to phrase the report in terms of requirements and
let Ops have the freedom (which of course they have) to
implement a solution of their design that meets the
requirements.

But we can and I think should signal that a MDQ service
operated on top of a CDN is a strong candidate.

As someone else already pointed out more eloquently, the MDQ
protocol is simple and, I dare say, elegant. An implemenation for
InCommon will have to deliver the same small files (~8KB) to many
clients distributed across the country and around the world
over and over again. Files that sometimes change, but not too
often. With as much uptime and as little latency as can be
achieved in a cost effective way.

That sounds like a problem the rest of the internet has solved
(_javascript_, css, images) in cost effective ways using CDNs.

Scott K



Archive powered by MHonArc 2.6.19.

Top of Page