<p>Diffie-Hellman Key Exchange is used in a security technique called Forward Secrecy that aims to secure your encrypted communications from future decryption by unauthorized entities. While it does provide additional security it is not absolutely bullet-proof. So while we explain how it works and provides security, we will also discuss how it can go wrong. For more go to <a href="https://www.zwilnik.com/?page_id=957" class="uri">https://www.zwilnik.com/?page_id=957</a></p>
<h3 id="links">Links:</h3>
<ul>
<li><a href="https://www.eff.org/https-everywhere" class="uri">https://www.eff.org/https-everywhere</a></li>
<li><a href="https://en.wikipedia.org/wiki/POODLE" class="uri">https://en.wikipedia.org/wiki/POODLE</a></li>
<li><a href="https://www.zwilnik.com/?page_id=686" class="uri">https://www.zwilnik.com/?page_id=686</a></li>
<li><a href="https://security.googleblog.com/2011/11/protecting-data-for-long-term-with.html" class="uri">https://security.googleblog.com/2011/11/protecting-data-for-long-term-with.html</a></li>
<li><a href="https://blog.twitter.com/engineering/en_us/a/2013/forward-secrecy-at-twitter.html" class="uri">https://blog.twitter.com/engineering/en_us/a/2013/forward-secrecy-at-twitter.html</a></li>
<li><a href="https://www.khanacademy.org/math/applied-math/cryptography/modern-crypt/v/discrete-logarithm-problem" class="uri">https://www.khanacademy.org/math/applied-math/cryptography/modern-crypt/v/discrete-logarithm-problem</a></li>
<li><a href="https://vincent.bernat.im/en/blog/2011-ssl-perfect-forward-secrecy.html#some-benchmarks" class="uri">https://vincent.bernat.im/en/blog/2011-ssl-perfect-forward-secrecy.html#some-benchmarks</a></li>
<li><a href="https://www.thesslstore.com/blog/apple-will-require-use-ats-2017/" class="uri">https://www.thesslstore.com/blog/apple-will-require-use-ats-2017/</a></li>
<li><a href="https://www.zwilnik.com/?page_id=957" class="uri">https://www.zwilnik.com/?page_id=957</a></li>
</ul>
