{"id":391,"date":"2013-06-27T10:01:33","date_gmt":"2013-06-27T15:01:33","guid":{"rendered":"http:\/\/www.poweradmin.com\/blog\/?p=391"},"modified":"2015-04-27T08:47:34","modified_gmt":"2015-04-27T13:47:34","slug":"perfect-forward-security-and-ssl-encryption","status":"publish","type":"post","link":"https:\/\/www.poweradmin.com\/blog\/perfect-forward-security-and-ssl-encryption\/","title":{"rendered":"Perfect Forward Security and SSL Encryption"},"content":{"rendered":"

\n\t\"Perfect<\/a>Michael Horowitz wrote a great article at Computer World entitled Perfect Forward Secrecy can block the NSA from secure web pages, but no one uses it<\/a>.\n<\/p>\n

\n\tThe tl;dr \u2013 encrypted HTTPS communications can be saved by Big Brother, and if the private key is broken at some time in the future, the saved communications can then be\u00a0decrypted and read.\n<\/p>\n

\n\tTo avoid this fate, the HTTP server needs to use ephemeral keys (keys that are unique to each encrypted session).\u00a0 Almost nobody does this.\u00a0 I double-checked PA Server Monitor's<\/a> (and PA File Sight's<\/a>) internal HTTPS server, and sure enough, we use ephemeral keys \ud83d\ude42\u00a0 We have the best software engineers (thanks Steve!).\n<\/p>\n

\n\tIf you'd like to verify this using the technique mentioned in the article (using the Chrome browser for example), head over to our demo server and take a look<\/a>.\n<\/p>\n

\n\tImage: \u00a9 <\/span>Rob Pongsajapan<\/a>\n<\/p>\n

\n\t\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"

Michael Horowitz wrote a great article at Computer World entitled Perfect Forward Secrecy can block the NSA from secure web pages, but no one uses it. The tl;dr \u2013 encrypted HTTPS communications can be saved by Big Brother, and if the private key is broken at some time in the future, the saved communications can […]<\/p>\n","protected":false},"author":3,"featured_media":399,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,10,9],"tags":[],"class_list":["post-391","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-general-it","category-power-admin","category-technical"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t