Forced to read the TLS (SSL) spec cover to cover, I end up making a few modest proposals in how to cut down on the multi-kilobyte handshake.
Enjoying the bug in some versions of g++: does this code assert on your system?