On 03/29/2018 01:05 AM, @lbutlr wrote:
On 2018-03-28 (09:02 MDT), David Mehler <dave.meh...@gmail.com> wrote:
What are some advantages of 1.3?
Faster. Less kruft. Drops many near-EOL cryptos. But the main one is that is
allows Perfect Forward Secrecy (PFS) which means that even is someone captures
the traffic and stores it, and even if they interfere with the traffic actively
at the time of communication, and then at some later time gets access to the
private keys used by the client and the server, they STILL can't decrypt it.
<https://en.wikipedia.org/wiki/Forward_secrecy>
This is kind of the holy grail in cryptography.
Not just allows PFS, so does TLS 1.2 and with TLS 1.2 PFS cyphers are
all I ever use. TLS 1.3 *mandates* PFS so you don't accidentally enable
a cipher that does not have it, and that is a HUGE benefit.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org
