Misconceptions About Forward-secrecy...

[Teddy Rogers]

Misconceptions About Forward-secrecy

 

Lately, there has been a lot of interest in forward-secrecy, mostly in the context of TLS/HTTPS. Some people seem to think it’s a magic bullet that will thwart all the NSA’s efforts. I am not against forward-secrecy, to the contrary, I think any encrypted communications protocol should use it, but I think it is important that people keep realistic expectations about what forward-secrecy protects them against. The worst security is security that you assume you have, but don’t actually have.

 

https://blog.thijsalkema.de/blog/2014/01/17/misconceptions-about-forward-secrecy/

 

Ted.