News for hackers. Stuff that matters.

A comment on The Great Cannon has been deployed again. Parent comment

Re:The Great Cannon has been deployed again by throw0101a on Friday December 06, 2019 @02:17PM (#21725044)
Not with (perfect) forward security:

> In cryptography, forward secrecy (FS), also known as perfect forward secrecy (PFS), is a feature of specific key agreement protocols that gives assurances that session keys will not be compromised even if the private key of the server is compromised.[1] Forward secrecy protects past sessions against future compromises of secret keys.[2][3][3]

* https://en.wikipedia.org/wiki/Forward_secrecy

There's still the risk of MITM identity spoofing of course.

[ Parent | on HN ]
Re:The Great Cannon has been deployed again by oconnor663 on Friday December 06, 2019 @02:40PM (#21725248)
Forward secrecy only helps you if the server private key is comprised in the future. If it's compromised already, and an active attacker can modify traffic between you and the server, forward secrecy doesn't help.

Ultimately, if an attacker has all your keys and controls all your traffic, there's nothing left that distinguishes the attacker from you. No security is possible in that scenario.

[ Parent | on HN ]