Who is Diffie Hellman

What is a Diffie Hellman Key?

DH Key exchange

DH Params

You should also specify your own Diffie-Hellman (DH) key exchange parameters. What you should know about it is that it is a protocol which allows two parties to negotiate a secret without ever putting that secret on the wire. It is pretty impressive piece of “artwork”.

Tell nginx to use DH params:

You can use openssl dhparam to generate parameters:


Generate DH parameters with at least 2048 bits. If you use 4096 bits for your TLS certificate you should match it in DH parameters too.

Lees meer;

Volgende bericht