Currently I see ~200ms difference (repeated those tests a good number of times, of course, those are results closest to average):<p><pre><code>    $ time curl -4 -s -o &#x2F;dev&#x2F;null https:&#x2F;&#x2F;drdaeman.pp.ru
    curl -4 -s -o &#x2F;dev&#x2F;null https:&#x2F;&#x2F;drdaeman.pp.ru  0.00s user 0.00s system 2% cpu 0.300 total

     $ time curl -4 -s -o &#x2F;dev&#x2F;null http:&#x2F;&#x2F;drdaeman.pp.ru
    curl -4 -s -o &#x2F;dev&#x2F;null http:&#x2F;&#x2F;drdaeman.pp.ru  0.00s user 0.00s system 7% cpu 0.107 total
</code></pre>
The host isn&#x27;t doing anything, although the server is old weak Atom machine so it could take some time to do RSA. I followed some guides (say, used Mozilla-recommended cipher list) to get &quot;A+&quot; rating with SSLLabs. Currently it&#x27;s just &quot;A&quot;, I guess because of SHA1 deprecation on Startcom intermediate certs. <a href="https:&#x2F;&#x2F;www.ssllabs.com&#x2F;ssltest&#x2F;analyze.html?d=drdaeman.pp.ru&amp;s=188.64.129.5" rel="nofollow">https:&#x2F;&#x2F;www.ssllabs.com&#x2F;ssltest&#x2F;analyze.html?d=drdaeman.pp.r...</a><p>I&#x27;m also using 4Kbit RSA keys, maybe that&#x27;s the cause, especially given that the server is a tiny Atom HTPC sitting in the kitchen (100ms is because I&#x27;m accessing it from the other country). Will try to find some time on weekend and test with 2Kbit ones to see if this is indeed the cause.<p>--------------<p>Added: seems that this worsens with latency, because I see extra 200ms. Maybe the cause is extra network round-trips, not crypto overhead. Or maybe there&#x27;s something with my curl...<p><pre><code>    $ time curl -4 -s -o &#x2F;dev&#x2F;null http:&#x2F;&#x2F;stavros.io&#x2F;404
    curl -4 -s -o &#x2F;dev&#x2F;null http:&#x2F;&#x2F;stavros.io&#x2F;404  0.00s user 0.00s system 4% cpu 0.180 total

    $ time curl -4 -s -o &#x2F;dev&#x2F;null https:&#x2F;&#x2F;stavros.io&#x2F;404
    curl -4 -s -o &#x2F;dev&#x2F;null https:&#x2F;&#x2F;stavros.io&#x2F;404  0.01s user 0.00s system 2% cpu 0.370 total
</code></pre>
Unfortunately, don&#x27;t have time to meditate on Wireshark output right now. :(