4 ms·
> Note that DuckDuckGo doesn't use Diffie-Hellman for its key exchange, Source?
by isaacaggrey 13y ago
> Note that DuckDuckGo doesn't use Diffie-Hellman for its key exchange,
Source?
- mortehu 13y agoOpen https://duckduckgo.com/ https://duckduckgo.com/ in your web browser and click on the green padlock. Note that the certificate is from 2012, and that the key exchange method is RSA.
- js4all 13y agoI never heard about that's a problem. I checked several popular sites, Google, Amazon, Apple, Bank of America. They all use RSA. Do you have examples for secure site (under this aspect) and background info?
- mortehu 13y agoAre you sure? google.com uses ECDHE_RSA here. eta: You also asked for background info. It's been discussed on Hacker News recently: http://en.wikipedia.org/wiki/Perfect_forward_secrecy http://en.wikipedia.org/wiki/Perfect_forward_secrecy
- js4all 13y ago> Are you sure? google.com uses ECDHE_RSA here. You are right about google.com, the others still use RSA. Thanks for the background info. Maybe SSLLabs should take this into account when doing their tests. Until now they make no difference between DH and RSA.