3 ms·
> This sounds like a good thing until you realize that such monitoring has no privacy implications at all If you don't have forward secrecy then there is the p
by brl 17y ago
> This sounds like a good thing until you realize that such monitoring has no privacy implications at all
If you don't have forward secrecy then there is the possibility that an adversary can silently sniff your traffic for as long as they want and then later steal your private key and decrypt everything.
This is a threat that really matters to some people:
http://www.libertysecurity.org/article342.html http://www.libertysecurity.org/article342.html
http://techmeet.sarava.org/uploads/Agenda/SSL_For_Activists.pdf http://techmeet.sarava.org/uploads/Agenda/SSL_For_Activists....
- tptacek 17y agoThat's true, and my point isn't that EDH is bad; it's that there are cases where you don't want it used, like when you own the servers and operationally want the ability to monitor connections from other vantage points that would also have the server's private key.