Abstract

Communication over the Internet uses SSL and TLS. These protocols enable us to secure data through encryption, provide authentication, and guarantee the integrity of data. Nonetheless, SSL/TLS handshake processes cause delays over secure connections, particularly for modern applications, for the first time. In this paper, we explore the delays of the SSL/TLS handshake relative to user impact, server load, and application responsiveness. In the research, we evaluate every phase of the handshake event, including DNS resolution, certificate and key negotiation, and the establishment of the TCP connection. Using actual transaction data and application performance tools, we were able to evaluate the event delay performance on various dive phases to evaluate the protocol versions, TLS v1.2 versus v1.3, and to contrast their cybersecurity configurations. It was determined that TLS v1.3 on its own reduces handshake delay, but at the same time, other variables, such as the length of certificate chains, round-trip time, and the server configuration, are involved. Other delay optimizations include handshakes such as TLS False Start, session resumption, and HTTP/2's multiplexing. This paper establishes the equilibrium of security and performance to the benefit of network administrators and web developers for practical application. The results are of particular interest for mobile networks and global scenarios where latency may be detrimental to service performance. The current study addresses ongoing endeavors aiming to enhance the effectiveness of secure communication while further streamlining automated decision-making within the architecture and infrastructure design of web systems.