Knowledge Base

F

Key Exchange Algorithm: anonymous Diffie-Hellman

Summary

Security
The anonymous Diffie-Hellman[90] key exchange[467] is a variant of Diffie-Hellman[269][270][271][272][273] key exchange that does not provide authenticity[201][202][203]. Lack of authentication causes that the identity of server cannot be proved, so connection is open for a man-in-the-middle attack[414].
Suggestion
Remove the cipher suite from the list of cipher suites supported by your server or replace the cipher suite with it's Ephemeral Diffie-Hellman[142][143][144][145] version.

Evaluate your host!

Type a URL to analyze a service

Get a prompt and clear overview of your security configuration. Right now!

Config Snippets

You can fix your security setting with the following config snippets in various services. You simply copy-paste (or delete) them to get a better secirity and grade. Do not forget to re-check your modified settings above.

If you want to reveal your security weaknesses and monitor your services or supply chain sign up for our beta test.

i
NGINX
OpenSSL version: 0.9.8+
ssl_ciphers …:!ADH
i
Apache
OpenSSL version: 0.9.8+
SSLCipherSuite …:!ADH

Affected Ciphersuites