[tptacek]

Will Google even do a straight FFDH TLS handshake? I tried with s_client and couldn't find a cipher string that would work (starting by taking the default and just chopping all the non-DH strings out).

[wolf550e]

Looks like google won't: https://www.ssllabs.com/ssltest/analyze.html?d=www.google.co...