Optimizing Nginx TLS Time To First Byte

SSL stapling can reduce the overhead as well, simple nginx config:<p><pre><code> http { ssl_stapling on; ssl_stapling_verify on; ssl_trusted_certificate &#x2F;etc&#x2F;nginx&#x2F;ssl&#x2F;stapling.trusted.crt; resolver 8.8.4.4 8.8.8.8 valid=300s; resolver_timeout 15s; } </code></pre> We <a href="https://commando.io" rel="nofollow">https:&#x2F;&#x2F;commando.io</a> use GoDaddy SSL (sigh, face-palm), so the contents of stapling.trusted.crt is:<p><pre><code> http:&#x2F;&#x2F;pastebin.com&#x2F;0H0i09Pn</code></pre>

I like TLS False Start and other, similar speculative algorithms. Speculative execution is especially interesting in circuit design!