in case i cannot do PSK (give the same key to both sides via physical means). i saw tls1.3 still support DH (doesnt matter that it is DHE or ECDH). isnt that makes it a weak key exchange? do they rely on seperate key exchange algo.? (like PAK - x.1035)


1 Answer 1


TLS 1.3 without PSK (i.e. the usual use-case of TLS) uses a certificate which verifies the authenticity of the service, just like all the other versions of TLS (and SSL). For most typical uses in web browsers, the server's certificate is signed by a certificate authority (CA). It doesn't matter what key exchange algorithm is used as long as it is strong (DH and ECDH are considered strong).

See also The New Illustrated TLS Connection: Every byte explained and reproduced for TLS 1.3.

  • $\begingroup$ i asked about man in the middle. DH cannot cope with it. x.1035 can , but it is not part of the TLS... $\endgroup$
    – Offir
    Sep 8, 2019 at 10:26
  • 1
    $\begingroup$ @Offir DH alone cannot cope with it, but TLS supports certificates. $\endgroup$
    – forest
    Sep 8, 2019 at 10:47

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.