Skip to main content
typos
Source Link
Bruno Rohée
  • 5.5k
  • 30
  • 41

Short answer is no. Longer answer: a collection of the answers above plus: If we solve the authentication, hence man-in-the-middle, that with traditional SSL connectyion somone listningconnection someone listening to the traffic could still decrypt it later if they obtained a server secret key (think of NSA and National Security Letters). There is a option in TLS protocol to use Diffie-HelmanHellman protocol to assure link confidentially. See the following picture when I am accessing gmail.com using Chrome. connection security

Look at text RC4_128 with SHA1 for message authentication ECDHE_ECDSA. This reads:

  1. Server offered SSL channel RC4_128b with SHA digest
  2. Inside this tunnel each message is encrypted with Ecliptic curves where key is derived using Diffie-HelmanHellman function, and is signed with Ecliptic Curves cipher using Digital Signature Algorithm

In other words, even if someone has private key of the SSL server, the messages have been encrypted with temporary keys that are discarded from memory soon after use. Good luck NSA!

Short answer is no. Longer answer: a collection of the answers above plus: If we solve the authentication, hence man-in-the-middle, that with traditional SSL connectyion somone listning to the traffic could still decrypt it later if they obtained a server secret key (think of NSA and National Security Letters). There is a option in TLS protocol to use Diffie-Helman protocol to assure link confidentially. See the following picture when I am accessing gmail.com using Chrome. connection security

Look at text RC4_128 with SHA1 for message authentication ECDHE_ECDSA. This reads:

  1. Server offered SSL channel RC4_128b with SHA digest
  2. Inside this tunnel each message is encrypted with Ecliptic curves where key is derived using Diffie-Helman function, and is signed with Ecliptic Curves cipher using Digital Signature Algorithm

In other words, even if someone has private key of the SSL server, the messages have been encrypted with temporary keys that are discarded from memory soon after use. Good luck NSA!

Short answer is no. Longer answer: a collection of the answers above plus: If we solve the authentication, hence man-in-the-middle, that with traditional SSL connection someone listening to the traffic could still decrypt it later if they obtained a server secret key (think of NSA and National Security Letters). There is a option in TLS protocol to use Diffie-Hellman protocol to assure link confidentially. See the following picture when I am accessing gmail.com using Chrome. connection security

Look at text RC4_128 with SHA1 for message authentication ECDHE_ECDSA. This reads:

  1. Server offered SSL channel RC4_128b with SHA digest
  2. Inside this tunnel each message is encrypted with Ecliptic curves where key is derived using Diffie-Hellman function, and is signed with Ecliptic Curves cipher using Digital Signature Algorithm

In other words, even if someone has private key of the SSL server, the messages have been encrypted with temporary keys that are discarded from memory soon after use. Good luck NSA!

Source Link

Short answer is no. Longer answer: a collection of the answers above plus: If we solve the authentication, hence man-in-the-middle, that with traditional SSL connectyion somone listning to the traffic could still decrypt it later if they obtained a server secret key (think of NSA and National Security Letters). There is a option in TLS protocol to use Diffie-Helman protocol to assure link confidentially. See the following picture when I am accessing gmail.com using Chrome. connection security

Look at text RC4_128 with SHA1 for message authentication ECDHE_ECDSA. This reads:

  1. Server offered SSL channel RC4_128b with SHA digest
  2. Inside this tunnel each message is encrypted with Ecliptic curves where key is derived using Diffie-Helman function, and is signed with Ecliptic Curves cipher using Digital Signature Algorithm

In other words, even if someone has private key of the SSL server, the messages have been encrypted with temporary keys that are discarded from memory soon after use. Good luck NSA!