Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

At the time the Cloudflare blog post “ECDSA: The digital signature algorithm of a better internet” was authored, Cloudflare was apparently one of "fewer than fifty" users of ECDSA certificates on the web. It seems they have since stopped (via ssllabs.com test).

I briefly surveyed several other major web properties using that tool (Google, Yahoo, Microsoft, Facebook, Amazon, Tumblr). Only Google seems to offer an EC key and ECDSA suites.

When I test locally, though (with cipherscan or openssl s_client -connect google.com:443 -cipher ECDHE-ECDSA-AES256-GCM-SHA384), I seem unable to handshake ("no peer certificate available").

Is anyone able to connect to Google (or another popular site) using an ECDSA ciphersuite?

share|improve this question

migrated from crypto.stackexchange.com May 23 at 13:44

This question came from our site for software developers, mathematicians and others interested in cryptography.

    
Chrome uses ECDSA for gmail –  CodesInChaos May 22 at 16:34
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.