Hacker News new | ask | show | jobs
by schoen 3552 days ago
Not passively anymore: login.yahoo.com is negotiating PFS ciphersuites which the private key can't decrypt without a copy of the ephemeral ECDHE parameters.