SSL: Intercepted today, decrypted tomorrow

Creer · Jun 28, 2013

There is a defence against this, known as perfect forward secrecy (PFS). When PFS is used, the compromise of an SSL site's private key does not necessarily reveal the secrets of past private communication; connections to SSL sites which use PFS have a per-session key which is not revealed if the long-term private key is compromised. The security of PFS depends on both parties discarding the shared secret after the transaction is complete (or after a reasonable period to allow for session resumption).
Click to expand...

Netcraft did test which browsers support PFS, results are very interesting especially for IE browser - all article: http://news.netcraft.com/archives/2013/06/25/ssl-intercepted-today-decrypted-tomorrow.html

Log in or Sign up

SSL: Intercepted today, decrypted tomorrow

Creer Registered Member

Log in or Sign up

SSL: Intercepted today, decrypted tomorrow

Creer Registered Member

Useful Searches