> On ECDHE's side, handshakes almost always use the P-256 curve. Again, this makes sense, since Internet Explorer, Chrome and Firefox only support P256 at the m

> On ECDHE's side, handshakes almost always use the P-256 curve. Again, this makes sense, since Internet Explorer, Chrome and Firefox only support P256 at the moment. But according to recent research public by DJB & Lange, this might not be the safest choice. Not only is it not safe, but it's also 3x slower than DJB's own 256-bit Curve25519: https://www.imperialviolet.org/2010/12/21/eccspeed.html https://www.imperialviolet.org/2010/12/21/eccspeed.html All the browsers should hurry up and support it already. Also maybe it's time to consider using NaCl, or some other alternative to OpenSSL, which seems hopeless.