3 ms·
I'm not suggesting that this makes it acceptable to use in production - but am I right in thinking that you'd be unable to MITM the connection if the server/cli
by JosephRedfern 11y ago
I'm not suggesting that this makes it acceptable to use in production - but am I right in thinking that you'd be unable to MITM the connection if the server/client both support perfect forward secrecy?
- brohee 11y agoSomeone that intercepts the traffic act as a proxy and will just PFS with the client and the server. Confidentiality should be ensured by PFS if the attacker is only sniffing. But so many scenarios where even an unsophisticaded attacker can do more that is is not worth thinking about.
- JosephRedfern 11y agoThat makes perfect sense - thanks.