A simple SSL tweak could protect you from GCHQ/NSA snooping

  • 26 June 2013
  • 0 replies
  • 2 views

Userlevel 7
Badge +54
A simple SSL tweak could protect you from GCHQ/NSA snooping.
It might slow you down, but hey, you can't have everything

 
An obscure feature of SSL/TLS called Forward Secrecy may offer greater privacy, according to security experts who have begun promoting the technology in the wake of revelations about mass surveillance by the NSA and GCHQ.

Every SSL connection begins with a handshake, during which the two parties in an encrypted message exchange perform authentication and agree on their session keys, through a process called key exchange. The session keys are used for a limited time and deleted afterwards. The key exchange phase is designed to allow two users to exchange keys without allowing an eavesdropper to intercept or capture these credentials.

Several key exchange mechanisms exist but the most widely used mechanism is based on the well-known RSA algorithm, explains Ivan Ristic, director of engineering at Qualys. This approach relies on the server's private key to protect session keys.
 
Full story - http://www.theregister.co.uk/2013/06/26/ssl_forward_secrecy/

 

0 replies

Be the first to reply!

Reply