3 ms·
DHE has already been considered weak, with ECDHE as the recommended replacement, for a long time now, so I suspect that most systems operated by people who take
by josephcsible 4y ago
DHE has already been considered weak, with ECDHE as the recommended replacement, for a long time now, so I suspect that most systems operated by people who take security seriously already won't be vulnerable to this.
- meltyness 4y agoYour post corroborates SUSE[0] claims that ECDHE is not vulnerable to this. Default golang TLS server looks like it's got it's head on straight for this. [0] https://www.suse.com/support/kb/doc/?id=000020510 https://www.suse.com/support/kb/doc/?id=000020510