[joegosse]

Interesting detail from the Google license exhibit:

Encryption Technologies. Google makes HTTPS encryption (also referred to as SSL or TLS connection) available. Google servers support ephemeral elliptic curve Diffie-Hellman cryptographic key exchange signed with RSA and ECDSA. These perfect forward secrecy (PFS) methods help protect traffic and minimize the impact of a compromised key, or a cryptographic breakthrough.

https://www.sec.gov/Archives/edgar/data/1564408/000119312517...

[prdonahue]

How is that "interesting"? They're just saying they use ECDHE which, by definition, provides forward secrecy.

[analogist]

Isn't that's just a description of all TLS? ECDHE/DHE key exchange is essentially employed on any non-poorly configured modern https site, TLS 1.0-1.3draft.