3 ms·
Isn't forward secrecy helpful in protecting against exactly this kind of thing?
by jcoffland 9y ago
Isn't forward secrecy helpful in protecting against exactly this kind of thing?
- icebraining 9y agoThat only protects against breaches of the long-term key, not against attacks on the cipher itself, AFAIK. So if in the future they manage to attack AES (or whatever cipher the connection was using), forward secrecy won't help.
- wolf550e 9y agoIf you use 1024 bit DH with a common group (old/misconfigured web and email servers do this) then it is suspected nation states can break the DH, get the shared symmetric key and decrypt all traffic. For ECDHE over P-256, they would need to wait for a big quantum computer (which will break all recorded traffic that used a non-quantum resistant key exchange, which is all current traffic).
- pixl97 9y agoAre you sure your apps fail to connect if they don't negotiate forward secrecy?