News for hackers. Stuff that matters.

A comment on Perfect Forward Secrecy can block the NSA, but almost no one uses it. Parent comment

Re:Perfect Forward Secrecy can block the NSA, but almost no ... by lazyjones on Monday June 24, 2013 @03:00PM (#5934927)
> Yes you are wrong :D If NSA is not actively man-in-the-middling you, Perfect forward secrecy still works.

OK, I guess I was reading too much into the (not very enlightening) definition of PFS on Wikipedia and too little of the actual implementation based on Diffie-Hellman, which has the desired properties.

The question that arises is: how feasible is a MITM attack on this phase of session initiation? Can it be kept undetected?

[ Parent | on HN ]
Re:Perfect Forward Secrecy can block the NSA, but almost no ... by tonfa on Monday June 24, 2013 @05:59PM (#5936009)
With channel id, it would need to share the state even as laptops move across networks.
[ Parent | on HN ]