Use elliptic curve Diffie-Hellman with forward secrecy. See... Google Security: Protecting data for the long term with forward secrecy http://googleonlinesecu

Use elliptic curve Diffie-Hellman with forward secrecy. See... Google Security: Protecting data for the long term with forward secrecy http://googleonlinesecurity.blogspot.com/2011/11/protecting-data-for-long-term-with.html http://googleonlinesecurity.blogspot.com/2011/11/protecting-... Google Research: Fast Elliptic Curve Cryptography in OpenSSL http://research.google.com/pubs/pub37376.html http://research.google.com/pubs/pub37376.html http://static.googleusercontent.com/external_content/untrusted_dlcp/research.google.com/en/us/pubs/archive/37376.pdf http://static.googleusercontent.com/external_content/untrust... SSL Labs: Deploying Forward Secrecy https://community.qualys.com/blogs/securitylabs/2013/06/25/ssl-labs-deploying-forward-secrecy https://community.qualys.com/blogs/securitylabs/2013/06/25/s... Michael Horowitz: Perfect Forward Secrecy can block the NSA from secure web pages, but no one uses it (http://blogs.computerworld.com/encryption/22366/can-nsa-see-through-encrypted-web-pages-maybe-so http://blogs.computerworld.com/encryption/22366/can-nsa-see-...)