3 ms·
Maybe they should just be advised to use PFS/ECDHE instead (which should be done anyway), and it would solve this problem by itself.
by higherpurpose 12y ago
Maybe they should just be advised to use PFS/ECDHE instead (which should be done anyway), and it would solve this problem by itself.
- sdevlin 12y agoThat would not solve the problem of active man-in-the-middle attacks.
- mobiplayer 12y agoYes, even renewing your keys and certs doesn't mean any previous communication is not compromised :)