envoyproxy / envoyproxy/envoy-mobile

Use memcmp as a certificate verifier

Open
#2,139 0 comments 0 reactions 0 assignees View on GitHub
perf
Dominant language
Java
Stars
566
Forks
85
PR merge metrics
No merged PRs in 30d

Description

Since certificate verification can be quite slow and can be on the critical path for an app, it would be great to use a simple memcmp instead. To do this, we'd need the ability to provide a leaf certificate and the hostname it's valid to Envoy Mobile and then when verifying that the received certificate is valid, it could simple return true if the received cert is identical, otherwise fall back to the normal verification logic.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.