Sign up ×
Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

At the time the Cloudflare blog post “ECDSA: The digital signature algorithm of a better internet” was authored, Cloudflare was apparently one of "fewer than fifty" users of ECDSA certificates on the web. It seems they have since stopped (via test).

I briefly surveyed several other major web properties using that tool (Google, Yahoo, Microsoft, Facebook, Amazon, Tumblr). Only Google seems to offer an EC key and ECDSA suites.

When I test locally, though (with cipherscan or openssl s_client -connect -cipher ECDHE-ECDSA-AES256-GCM-SHA384), I seem unable to handshake ("no peer certificate available").

Is anyone able to connect to Google (or another popular site) using an ECDSA ciphersuite?

share|improve this question

migrated from May 23 '14 at 13:44

This question came from our site for software developers, mathematicians and others interested in cryptography.

Chrome uses ECDSA for gmail –  CodesInChaos May 22 '14 at 16:34

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.