On Nov 17, 2014 8:14 AM, "Jason Greene" <jason.greene@redhat.com> wrote: > Even better would be to support anonymous ECDH. Why bother requiring all of these fake certs to be generated when they have no legit purpose. That at least is an easy one to answer. If your handshake looks different (and any anonymous mode will, unless you use TLS 1.3 and some aggressive padding), then you open an invitation to MitM. Have them look identical, and it gets harder to mount an undetectable attack. Not to mention avoiding code complexity.
Received on Tuesday, 18 November 2014 05:52:30 UTC