3 ms·

I thought ephemeral keys prevent replay attacks as well. Is that incorrect?

• dozzie 11y ago
  No, not really. Server needs to trust that client would reject an invalid or forged certificate. Diffie-Hellman key exchange is still a subject to man-in-the-middle attack.