Skip to content

Comment on Mediocre Engineer's Guide to HTTPS

Comments

Current version of TLS (>1.3) do not support RSA (and various other cipher suites) for security reasons.

That is true for the key exchange part because RSA does not offer forward security. For signatures RSA is still used and probably still the most widely spread type of x509 certs.

I know Safari just upped the requirements to 2048bit keys for RSA not too long ago (for signatures).

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.