TL;DR - Are there any benefits to using static DH over ephemeral DH?
I'm reading about the differences between static DH & ephemeral DH and I am trying to think of one logical reason to use static(-static) DH over ephemeral(-ephemeral) DH.
My understanding of DHE is that it provides Forward Secrecy which is something we want, is it not? FS ensures that if the server private key were to get leaked past communication would be secure correct?
So why would we still want to use static DH? Are there any benefits to this? I would presume that computation is perhaps one factor?