HTTPS Support

[David M]

I'm interested to work on extending the proposed SDCH to include HTTPS
support. Within enterprise there is a good deal of HTTPS traffic (for
security purposes) that could benefit from SDCH provided the
dictionaries were stored encrypted on the client-side. Is now a good
time to kick-start this topic? It seems SDCH with HTTPS would be an
interesting alternative to a proprietary WAN acceleration device or
VPN client.

-David

[Lincoln]

Hi David:

Thank you for bringing up this point. A proposal for extending SDCH
to include HTTPS traffic would be most welcome.

This is a change that may have non-obvious security implications, so
the more voices that participate in the discussion, the better. Your
point about encrypting stored dictionaries is a good one. Another
point that has been raised is that the client should not allow HTTPS
traffic to be encoded using a dictionary that was downloaded using non-
secure HTTP.

Saludos,

lincoln