4 ms·
Isn't it mostly banks that want RSA key exchange, so their exfiltration detectors can sniff TLS streams? Shouldn't matter in this case, anyhow, as they would b
by wahern 5y ago
Isn't it mostly banks that want RSA key exchange, so their exfiltration detectors can sniff TLS streams?
Shouldn't matter in this case, anyhow, as they would be disabling ephemeral KEX suites entirely.
- dharmab 5y agoThat's not so much to do with RSA as it does with Perfect Forward Secrecy. In fact, the banks tried to make their own separate TLS standard instead of using TLS 1.3: https://www.eff.org/deeplinks/2019/02/ets-isnt-tls-and-you-shouldnt-use-it https://www.eff.org/deeplinks/2019/02/ets-isnt-tls-and-you-s...