> Yeah, I looked at mod_ssl before sending in my gripe. AFAICT Apache
> *never* forces a renegotiation based on amount of data sent --- all that
> code is intended just to handle transitions between different webpages
> with different security settings. So is that a precedent we can follow;
> or is it an optimization based on the assumption that not a lot of data
> will be transferred on any one web page?
How about a GUC variable:
ssl_renegotiation = 0 # no unnecessary renegotiation
ssl_renegotiation = 64000 # renegotiate every 64000 bytes
Chris
