How to botch TLS forward secrecy

Re:How to botch TLS forward secrecy by mtgx on Friday June 28, 2013 @02:08AM (#5956530)

So if Google enables forward secrecy for Google searches, would that mean every single Google search would be encrypted with a new key, or only the "open session"? Would encrypting every search be possible with perfect forward secrecy [1]? And if so, can't we get that for TLS 1.3, too?

[1] http://en.wikipedia.org/wiki/Perfect_forward_secrecy

[ Parent | on HN ]

Re:How to botch TLS forward secrecy by willvarfar on Friday June 28, 2013 @05:05AM (#5956967)

Well Google is also a company that stores full history of everything and hands over stuff to the NSA, so in the bigger picture the point is moot?

[ Parent | on HN ]