in case i cannot do PSK (give the same key to both sides via physical means). i saw tls1.3 still support DH (doesnt matter that it is DHE or ECDH). isnt that makes it a weak key exchange? do they rely on seperate key exchange algo.? (like PAK - x.1035)


TLS 1.3 without PSK (i.e. the usual use-case of TLS) uses a certificate which verifies the authenticity of the service, just like all the other versions of TLS (and SSL). For most typical uses in web browsers, the server's certificate is signed by a certificate authority (CA). It doesn't matter what key exchange algorithm is used as long as it is strong (DH and ECDH are considered strong).

See also The New Illustrated TLS Connection: Every byte explained and reproduced for TLS 1.3.

| improve this answer | |
  • $\begingroup$ i asked about man in the middle. DH cannot cope with it. x.1035 can , but it is not part of the TLS... $\endgroup$ – Offir Sep 8 '19 at 10:26
  • 1
    $\begingroup$ @Offir DH alone cannot cope with it, but TLS supports certificates. $\endgroup$ – forest Sep 8 '19 at 10:47

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.