News for hackers. Stuff that matters.

A comment on Industry Concerns about TLS 1.3. Parent comment

Re:Industry Concerns about TLS 1.3 by nindalf on Wednesday October 05, 2016 @05:54AM (#12642658)
The person requesting this change controls neither the server nor the client. They control the intermediate network. If they could log the ephemeral keys it would solve the solution, but only the server and client hold that.
[ Parent | on HN ]
Re:Industry Concerns about TLS 1.3 by michaelt on Wednesday October 05, 2016 @10:12AM (#12643930)
As I understand it, if you don't have the server's private key it makes no difference whether a connection uses FS. FS merely means compromise of long-term keys does not compromise past session keys.

Surely for the presence of FS to be relevant, they must already have the server's private key, implying they do have control of the server?

[ Parent | on HN ]