Re: [P2PSIP] D/TLS with client authentication

[Jouni Mäenpää <jouni.maenpaa at ericsson.com>]

Hi,

>> Let's give it some more thought. With client authentication, any two
>> directly connected peers "trust" each other based on their overlay
>> credentials.  Therefore, single hop messages like DHT stablization can be
>> exchanged between them with no signature/certificates attached.  That's a
>> great saving to consider.
> 
> Yes, this is a potential optimization. But unless something is seriously
> wrong with the design (or the overlay is essentially quiescent), then
> this sort of stabilization traffic should be a small amount of the overall
> traffic, so it's not clear what the overall savings is.

Just one comment. I agree that if the overlay is experiencing very
little or no churn at all, the amount of stabilization traffic is rather
low. However, based on my experiences of running a P2P overlay in
PlanetLab, I would say that if the overlay is churning even at a
moderate rate, optimizations like this might well be worth doing. When
there is churn, you need to increase the amount of stabilization
messages and it is not unusual that a considerable percentage of the
total traffic is stabilization traffic.

-Jouni