3 ms·
> These challenges required that, for free customers, we limit Universal SSL support to modern browsers. Modern browsers include support for ECDSA, where many l
by higherpurpose 12y ago
> These challenges required that, for free customers, we limit Universal SSL support to modern browsers. Modern browsers include support for ECDSA, where many legacy browsers do not.
I hope in the (near) future, they'll enforce not using unsafe NIST curves for that, too. I don't think Internet Explorer supports Curve25519 or other safer curves right now, but it might in the future, and I hope they will make their move then.
Also, I hope Cloudflare has tripled its security team along with this, because they're going to be #1 on NSA's "to-break" list now.
- AlyssaRowan 12y agoThere's a draft for X25519 (as the key exchange algorithm is named now) already. Future use for new curves has been referred to CFRG by the TLS working group for recommendations; Curve25519 is one of the lead contenders. Discussion is lively, that's about all I feel comfortable saying right now. :)