Re: [TLS] Security today

[Mike <mike-list at pobox.com>]

>>> 3. The major servers support ephemeral DH, as do many clients.
>> This is where you are wrong.  Here is a list of servers that will
>> not negotiate DHE_RSA with any of AES128, AES256, or DES3:
> 
> I'm talking about the implementations, not the server operators. 
> The server operators have chosen not to turn it on.

And that is precisely why they need a document telling them just
how damaging that choice is.  Which do you think will get more
attention, a whitepaper outlining the dangers of not using DHE
preferentially, written by some random guy named Mike, or the
same paper with the backing of the TLS WG of the IETF Internet
Security area?

Mike
_______________________________________________
TLS mailing list
TLS at ietf.org
https://www.ietf.org/mailman/listinfo/tls