3 ms·
Can you please expand on this? Does using TLS (vs SSL2v3) automatically ensure you're using ephermal diffie hellman?
by nonane 13y ago
Can you please expand on this? Does using TLS (vs SSL2v3) automatically ensure you're using ephermal diffie hellman?
- tptacek 13y agoNo, it's a ciphersuite; the server and client have to agree to use it.
- newman314 13y agoNo. You can't control the client but you can have the server offer up a preferred list of ciphers. On nginx, this would be ssl_prefer_server_ciphers = on; for example
- staunch 13y agoThese may be useful https://www.ssllabs.com/ssltest/ https://www.ssllabs.com/ssltest/ https://www.ssllabs.com/projects/best-practices/ https://www.ssllabs.com/projects/best-practices/