Re: [TLS] Security today

[Eric Rescorla <ekr at networkresonance.com>]

At Sat, 29 Mar 2008 10:15:25 -0700,
Mike wrote:
> 
> > 3. The major servers support ephemeral DH, as do many clients.
> 
> This is where you are wrong.  Here is a list of servers that will
> not negotiate DHE_RSA with any of AES128, AES256, or DES3:

I'm talking about the implementations, not the server operators. 
The server operators have chosen not to turn it on.

-Ekr
_______________________________________________
TLS mailing list
TLS at ietf.org
https://www.ietf.org/mailman/listinfo/tls