1

By enabling 2Way SSL (both inbound and outbound), is there a performance impact / overhead (over 1 Way), specially for large volume data transactions.

My understanding is that only a few kilobytes of client certificate shared during the initial handshake should not cause any significant performance overhead on the overall integration.

Any thoughts / evidences appreciated.

0

In mutual authentication (two-way SSL), both ends authenticate the other, rather than just one side authenticating the other. This all happens in the handshake, and therefore only affects initial startup time. Once both sides are authenticated, the connection switches from the slower asynchronous encryption method to a faster synchronous encryption method, which is how the bulk of the data is transferred. The difference in startup time should be on the order of milliseconds, hardly anything worth worrying over. If you need the extra security feature, two-way SSL is recommended.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.