Why does TLS as used in https need DHKE? Since the server presents a certificate with a public key, can that not be used for session key establishment? The client (browser) can generate a session key, encrypt it using the server's public key & then send it to the server & that can be used for encrypting all future messages from client to server & from server to client.

So why is DHKE required in TLS at all?


Browse other questions tagged or ask your own question.