tls

Cloudflare Measures Origin TLS Preferences, Cutting Handshake Retries from 52% to 3.7%infoq.com

Cloudflare replaced a static assumption about origin TLS preferences with per-origin measurement, significantly reducing HelloRetryRequests (HRR) during TLS 1.3 handshakes. This optimization cut HRR from 52% to 3.7% for scanned origins and improved p90 handshake latency by over 150ms.