Hot answers tagged

4

DHE key exchange is very slow compared to ECDHE, so you should prefer the ECDHE ciphers. ECDSA is faster than RSA for the same level of security, but of course you need a ECDSA certificate and not a RSA certificate in this case. AES-GCM is faster than ChaCha20-Poly1305 on systems with hardware support for AES but slower on systems without hardware support. ...


1

The problem IDSes face today is encryption. Once you receive a stream of encrypted information, you can only try to make sense of its behaviour. They rely on defaults (a default port or protocol for a service), on well-known endpoints and on some pre-encryption activities (handshakes for instance). So I would say that it is more one of the few ...



Only top voted, non community-wiki answers of a minimum length are eligible