I'm watching "SSL, TLS, HTTPS Explained" by ByteByteGo on YouTube and at the end, starting around 5:15, there are two points that are interesting:
in TLS 1.3 RSA is no longer supported as the a method for key exchange Diffie-Hellman is a more common way nowadays for exchanging session keys Diffie-Hellman is complicated but in a nutshell it uses some advanced math involving large prime numbers to derive a shared session key without ever transmitting a public key over the network
My two questions are:
- Does TLS 1.3 longer support RSA? Why?
DH uses math involving large prime numbers to derive a share session key without ever transmitting a public key over the network.
Wait, what? Isn't that what DH and RSA both do?