Commit 849a3e2
doc: fix (EC)DHE remark in TLS docs
It is not true that all TLS 1.3 cipher suites use ECDH.
TLS 1.3 allows DH over finite fields instead of elliptic curves.
Also, the key exchange mechanism is independent of the cipher suite
in TLS 1.3.
PR-URL: #46114
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>1 parent 10afecd commit 849a3e2
1 file changed
Lines changed: 2 additions & 2 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -141,8 +141,8 @@ not required and a default ECDHE curve will be used. The `ecdhCurve` property | |||
| 141 | 141 | can be used when creating a TLS Server to specify the list of names of supported | |
| 142 | 142 | curves to use, see [`tls.createServer()`][] for more info. | |
| 143 | 143 | ||
| 144 | - Perfect forward secrecy was optional up to TLSv1.2, but it is not optional for | ||
| 145 | - TLSv1.3, because all TLSv1.3 cipher suites use ECDHE. | ||
| 144 | + Perfect forward secrecy was optional up to TLSv1.2. As of TLSv1.3, (EC)DHE is | ||
| 145 | + always used (with the exception of PSK-only connections). | ||
| 146 | 146 | ||
| 147 | 147 | ### ALPN and SNI | |
| 148 | 148 | ||
0 commit comments