RSA as implemented by OpenSSL et al. needs to protect against side channel attacks, at a big performance penalty.
However, TLS certificate validation involves no secrets. Therefore, I should be able to use a fast variable-time algorithm for this purpose, right?
Is this actually secure, and does anyone actually do this?