Skip to content

Commit f2ca172

Browse files
tniessendanielleadams
authored andcommitted
doc: remove statement about (EC)DHE performance
This statement is misleading in that it says "key generation is expensive". ECDHE key generation (over the elliptic curves that are commonly used for TLS) is insanely fast compared to most other types of key generation. This statement is irrelevant for TLS 1.3, which requires (EC)DHE. Even if this statement is somewhat true for TLS 1.2, it does not justify discouraging the use of (EC)DHE. PR-URL: #41528 Reviewed-By: Rich Trott <[email protected]> Reviewed-By: Anna Henningsen <[email protected]> Reviewed-By: Benjamin Gruenbaum <[email protected]>
1 parent 18e6316 commit f2ca172

File tree

1 file changed

+0
-3
lines changed

1 file changed

+0
-3
lines changed

doc/api/tls.md

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -89,9 +89,6 @@ the character "E" appended to the traditional abbreviations):
8989
* [ECDHE][]: An ephemeral version of the Elliptic Curve Diffie-Hellman
9090
key-agreement protocol.
9191

92-
Ephemeral methods may have some performance drawbacks, because key generation
93-
is expensive.
94-
9592
To use perfect forward secrecy using `DHE` with the `tls` module, it is required
9693
to generate Diffie-Hellman parameters and specify them with the `dhparam`
9794
option to [`tls.createSecureContext()`][]. The following illustrates the use of

0 commit comments

Comments
 (0)