4 ms·
Assume that non-PFS ciphersuites had remained in TLS: You still have to trust the endpoint to not negotiate a PFS ciphersuite.
by deathanatos 8y ago
Assume that non-PFS ciphersuites had remained in TLS: You still have to trust the endpoint to not negotiate a PFS ciphersuite.
- cbsmith 8y agoYes, but a failure to do so would be considered a compromise, as opposed to a simple network failure.