How does Perfect forward secrecy work in https?

Asked Jun 16 '13 at 17:11

Active Jun 16 '13 at 17:55

Viewed 108 times

How does Perfect forward secrecy work in https? How to check whether it is enabled or not? Which big site actually use this? Paypal? Facebook? Amazon?

I have read this Wikipedia article, but I don't know how it is applied in ssl. http://en.wikipedia.org/wiki/Perfect_forward_secrecy What are the weaknesses of this? How can it be broken?

edited Jun 16 '13 at 17:55

asked Jun 16 '13 at 17:11

user27296

How to check whether it is enabled or not? Which big site actually use this? Paypal? Facebook? Amazon? – user27296 Jun 16 '13 at 17:55
gmail does use ECDHE_RSA – CodesInChaos Jun 16 '13 at 18:21
@CodesInChaos How do you check that? – user27296 Jun 17 '13 at 00:49
@user27296: See question [How to check if the HTTPS connection is using perfect forward secrecy?](http://security.stackexchange.com/questions/47912/how-to-check-if-the-https-connection-is-using-perfect-forward-secrecy) – Lernkurve Jan 02 '14 at 17:19

How does Perfect forward secrecy work in https?

0 Answers0