Skip to content

Commit 2e826ad

Browse files
tniessenRafaelGSS
authored andcommittedJan 20, 2023
doc: fix (EC)DHE remark in TLS docs
It is not true that all TLS 1.3 cipher suites use ECDH. TLS 1.3 allows DH over finite fields instead of elliptic curves. Also, the key exchange mechanism is independent of the cipher suite in TLS 1.3. PR-URL: #46114 Reviewed-By: Ben Noordhuis <[email protected]> Reviewed-By: Luigi Pinca <[email protected]>
1 parent 5261560 commit 2e826ad

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed
 

‎doc/api/tls.md

+2-2
Original file line numberDiff line numberDiff line change
@@ -141,8 +141,8 @@ not required and a default ECDHE curve will be used. The `ecdhCurve` property
141141
can be used when creating a TLS Server to specify the list of names of supported
142142
curves to use, see [`tls.createServer()`][] for more info.
143143

144-
Perfect forward secrecy was optional up to TLSv1.2, but it is not optional for
145-
TLSv1.3, because all TLSv1.3 cipher suites use ECDHE.
144+
Perfect forward secrecy was optional up to TLSv1.2. As of TLSv1.3, (EC)DHE is
145+
always used (with the exception of PSK-only connections).
146146

147147
### ALPN and SNI
148148

0 commit comments

Comments
 (0)