Secure session resumption protocol selection based on network condition analysis

Abstract

Embodiments of secure session resumption protocol selection based on cost analysis are disclosed. Session resumption requests are received from clients (e.g., as packets). A cost (e.g., network latency time) associated with a client-round-trip-based resumption process that requires a round trip between the server and the client is determined. Another cost associated with a no-round-trip-to-client-based resumption process is determined (e.g., network latency to access a session state data store and/or session state data store processing time). The costs are analyzed in order to select which session resumption process is used to resume the requested session. The session is resumed using the selected session resumption process. In some embodiments, a particular secure session resumption protocol may be selected based on classification of the client into a category that estimates a roundtrip time between the client and the server.