1

Does the browser have a UI for displaying the details about the TLS connection to the website, besides the "secure/insecure" icon?

3

In Google Chrome:

  1. click on the padlock icon:

click on the padlock icon

  1. click on "Details":

click on "Details"

  1. click on reload:

click on reload

  1. In the Security Panel, click on the URL under "Main Origin":

In the Security tab, click on the URL under "Main Origin"

  1. look at value of "Key Exchange" under the "Connection" section:

look at value of "Key Exchange" under the "Connection" section

If the key exchange begins with "ECDHE" or "CECPQ1"1 then you have PFS.

In Mozilla Firefox:

  1. click on the padlock icon:

click on the padlock icon

  1. click on the expander thingy on the right side of the popup:

click on the expander thingy on the right side of the popup

  1. click on "More Information" on the bottom side of the popup:

click on "More Information" on the bottom side of the popup

  1. look at name of cipher suite in Page Info popup window:

look at name of cipher suite in Page Info popup window

If the name of the cipher suite begins with TLS_DHE_ or TLS_ECDHE then you have PFS.

I did not find a way to get Microsoft Edge to divulge the used TLS cipher suite in the UI - you need to sniff the traffic with wireShark or equivalent.

I don't have a Safari available right now, but I'll add that later if I find a way to the Safari to display the cipher suite.

1 - https://security.googleblog.com/2016/07/experimenting-with-post-quantum.html

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.