3 ms·

Forward secrecy proposal for those curious: http://tools.ietf.org/html/draft-balfanz-tls-channelid-00 http://tools.ietf.org/html/draft-balfanz-tls-channelid-00

• tptacek 13y ago
  That's one, but the basic mechanism --- deriving session keys from RSA-signed DH exchanges --- is old, and is simply a ciphersuite (Google deploys an ECC-version of it for performance).
• kniht 13y ago
  That proposal is for an ephemeral, per gTLD client key and an example of mutual authentication that aims to defeat _active_ attackers (MITM). Perfect forward secrecy in TLS is a bit different in that the ephemeral diffie-hellman key exchange sets up a shared key that is protected from a _passive_ attacker that observes the TLS encrypted communication and later gets a copy of the server's public key.