I thought this talk might be of interest to Launchpad developers working to
improve performance. It's aimed at HTTP sites wanting to add security, but
I think much of the information is applicable to an existing TLS site like
Launchpad as well.
http://www.imperialviolet.org/2010/06/25/overclocking-ssl.html
This is a write up of the talk that I gave at Velocity 2010 last
Thursday. This is a joint work of myself, Nagendra Modadugu and Wan-Teh
Chang.)
[...]
If there's one point that we want to communicate to the world, it's that
SSL/TLS is not computationally expensive any more. Ten years ago it
might have been true, but it's just not the case any more. You too can
afford to enable HTTPS for your users.