According to the Diffie-Hellman key exchange get affected by logjam, and openID uses this to establish an association. So how this going to affect OpenID?


logjam is not (even remotely) a break of the Diffie-Hellman key exchange method. It is a weakness of the TLS protocol. It affects only sessions, not credentials. It will soon be fixed. I estimate zero impact on OpenID. The "bad guys" cannot do MITM, only governments and ISPs could (in principle) do MITM.

  • 1
    No longer "in principle". -> Wiki: Quantum Insert – StackzOfZtuff May 21 '15 at 10:19
  • @StackzOfZtuff Damn, man. – Atsby May 21 '15 at 10:26
  • There are plenty of opportunities for even run of the mill bad guys to MITM... Running rogue hotspots in hotels/airports/etc... makes it very easy to achieve... – Bruno Rohée Oct 16 '15 at 17:31

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.