diff options
| author | Tobias Nießen <tniessen@tnie.de> | 2022-01-14 19:43:40 +0300 |
|---|---|---|
| committer | Tobias Nießen <tniessen@tnie.de> | 2022-01-16 20:36:12 +0300 |
| commit | 986cf3b986c6c3e1495327eb3aa1ffc3972f2442 (patch) | |
| tree | f91eee6ef79c079d6c4247e435dc7d62c507e259 /doc/api/tls.md | |
| parent | 67beba879cce0d874a5abadd1662aa43e6395ac0 (diff) | |
doc: remove statement about (EC)DHE performance
This statement is misleading in that it says "key generation is
expensive". ECDHE key generation (over the elliptic curves that are
commonly used for TLS) is insanely fast compared to most other types
of key generation.
This statement is irrelevant for TLS 1.3, which requires (EC)DHE.
Even if this statement is somewhat true for TLS 1.2, it does not
justify discouraging the use of (EC)DHE.
PR-URL: https://github.com/nodejs/node/pull/41528
Reviewed-By: Rich Trott <rtrott@gmail.com>
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
Diffstat (limited to 'doc/api/tls.md')
| -rw-r--r-- | doc/api/tls.md | 3 |
1 files changed, 0 insertions, 3 deletions
diff --git a/doc/api/tls.md b/doc/api/tls.md index 3c77f8c6c28..dfa7eb1d3fb 100644 --- a/doc/api/tls.md +++ b/doc/api/tls.md @@ -89,9 +89,6 @@ the character "E" appended to the traditional abbreviations): * [ECDHE][]: An ephemeral version of the Elliptic Curve Diffie-Hellman key-agreement protocol. -Ephemeral methods may have some performance drawbacks, because key generation -is expensive. - To use perfect forward secrecy using `DHE` with the `tls` module, it is required to generate Diffie-Hellman parameters and specify them with the `dhparam` option to [`tls.createSecureContext()`][]. The following illustrates the use of |