> > Because signature generation is slow. > > The original poster mentioned ansible. If you're doing ansible with > thousands of hosts a delay of 800+ ms for each new connection is a major > PITA. > Might I suggest a variation of the old adage ? Security, Cost, Speed. Pick Two.