2 ms·
What is worth mentioning here is that Apache servers do the same thing for Diffie-Hellman 'ephemeral' keys. We imagine those keys are generated for each session
by matthewdgreen 12y ago
What is worth mentioning here is that Apache servers do the same thing for Diffie-Hellman 'ephemeral' keys. We imagine those keys are generated for each session, but in fact one key can last for weeks and millions of sessions. (I leave it to someone with more Apache familiarity to correct me.)
- mnordhoff 12y agoWait, Diffie-Hellman keys? Don't those have to be unique? Do you mean the session ticket keys, used to encrypt session resumption information? https://www.imperialviolet.org/2013/06/27/botchingpfs.html https://www.imperialviolet.org/2013/06/27/botchingpfs.html
- matthewdgreen 12y agoI mean DHE keys.