Agree, this is super strange. No one wants to use DHE because of the performance impact. Windows 7 and later do already support ECDHE + GCM, but only when comb

Agree, this is super strange. No one wants to use DHE because of the performance impact. Windows 7 and later do already support ECDHE + GCM, but only when combined with ECDSA. In practice, nobody can use ECDSA because old clients still need RSA certificates. So we continue to wait for TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, which is clearly the cipher suite that everyone wants. Years later, still not available for Windows Server.