Activity log for bug #46591

Date Who What changed Old value New value Message
2006-05-25 14:48:58 Ian Jackson bug added bug
2006-09-20 15:50:25 Diogo Matsubara launchpad: status Unconfirmed Confirmed
2006-09-20 15:50:25 Diogo Matsubara launchpad: statusexplanation
2006-09-20 16:11:42 Diogo Matsubara description I was trying to use Launchpad while also using my internet connection for an rsync. RTT to launchpad.net from my workstation is around 550ms right now. I noticed that things were very slow, so I timed one of my page loads. I started at: https://launchpad.net/distros/ubuntu/+search?text=openoffice.org and clicked on `"openoffice.org2" in Ubuntu' to take me to https://launchpad.net/distros/ubuntu/+source/openoffice.org2 That page took 16 seconds to load. My browser and setup are otherwise normally reasonably fast; my workstation is an AMD Athlon 2400+ with 1.5Gb of RAM. If more of the page was cacheable then the number of sequential transactions would be reduced. Also, if the page were simpler it would be faster. As a comparison, http://www.kyradesign.co.uk/sites/ceasite/pages/cea.html takes 5 seconds with shift-reload to force reloading of everything. Normal navigation to pages already seen is instantaneous. Quoting Andrew: "...It's not so much the intrinsic overhead of SSL, it's that browsers typically don't cache resources served over https. This has the unfortunate result that linked images, css and javascript are redownloaded everytime. At the same time, browsers complain if you try to link to things like images at http URLs from https pages, with big scary warnings that "some parts of this page may be insecure." The best solution I know of is to only use https for the login form, because that transmits a password, and let everything else be in the clear."
2006-09-20 16:11:42 Diogo Matsubara title too many http transactions make everything too slow Serving everything under SSL causes slowdown
2007-03-02 03:33:15 Matthew Paul Thomas launchpad: importance Medium High
2009-03-31 04:22:46 Mary Gardiner removed subscriber Mary Gardiner
2009-10-18 15:17:24 Curtis Hovey launchpad-foundations: importance High Low
2011-01-14 23:51:11 Robert Collins description Quoting Andrew: "...It's not so much the intrinsic overhead of SSL, it's that browsers typically don't cache resources served over https. This has the unfortunate result that linked images, css and javascript are redownloaded everytime. At the same time, browsers complain if you try to link to things like images at http URLs from https pages, with big scary warnings that "some parts of this page may be insecure." The best solution I know of is to only use https for the login form, because that transmits a password, and let everything else be in the clear." Quoting Andrew: "...It's not so much the intrinsic overhead of SSL, it's that browsers typically don't cache resources served over https. This has the unfortunate result that linked images, css and javascript are redownloaded everytime. At the same time, browsers complain if you try to link to things like images at http URLs from https pages, with big scary warnings that "some parts of this page may be insecure." The best solution I know of is to only use https for the login form, because that transmits a password, and let everything else be in the clear." Notes ===== See bug 337517 - it covers anonymous users which only have publicly accessible data and no authentication cookie.
2011-01-15 00:01:02 Robert Collins launchpad: status Triaged Won't Fix