time in miliseconds / seconds for each of the SSL handshake

[anantshri]

Can we also have time in miliseconds / seconds for handshake of each of the ciphers. Might help in prioritising which cipher might be a quicker one.

I know this is not a security specific request but something which might help, so if its low priority for you that's fine.

[rbsec]

This was a pretty simple one to implemtn - the only real issue was the output. The timings aren't shown by default because most people won't be interested in them, so you have to use --show-times if you want them. It looks a little cluttered with the default output, so if all you want is the times then use --no-cipher-details as well.

The one thing I should stress is that this sslscan is not (and never will be) a proper benchmarking or performance testing tool. These times can give you an idea about which ciphers are quicker, but since we only do each probe once network jitter can completely throw it off. Also the handshakes will get slightly smaller for each accepted cipher (due to how the scan works), so that may have a small impact on the reported times as well.

[anantshri]

Awesome. Just checked all seems to be working as expected.

And yes i agree being blackbox and external this can be thrown off the charts based on server load and cipher order also.