1

Does the browser have a UI for displaying the details about the TLS connection to the website, besides the "secure/insecure" icon?

1 Answer 1

3

In Google Chrome:

  1. click on the padlock icon:

click on the padlock icon

  1. click on "Details":

click on "Details"

  1. click on reload:

click on reload

  1. In the Security Panel, click on the URL under "Main Origin":

In the Security tab, click on the URL under "Main Origin"

  1. look at value of "Key Exchange" under the "Connection" section:

look at value of "Key Exchange" under the "Connection" section

If the key exchange begins with "ECDHE" or "CECPQ1"1 then you have PFS.

In Mozilla Firefox:

  1. click on the padlock icon:

click on the padlock icon

  1. click on the expander thingy on the right side of the popup:

click on the expander thingy on the right side of the popup

  1. click on "More Information" on the bottom side of the popup:

click on "More Information" on the bottom side of the popup

  1. look at name of cipher suite in Page Info popup window:

look at name of cipher suite in Page Info popup window

If the name of the cipher suite begins with TLS_DHE_ or TLS_ECDHE then you have PFS.

I did not find a way to get Microsoft Edge to divulge the used TLS cipher suite in the UI - you need to sniff the traffic with wireShark or equivalent.

I don't have a Safari available right now, but I'll add that later if I find a way to the Safari to display the cipher suite.

1 - https://security.googleblog.com/2016/07/experimenting-with-post-quantum.html

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .