AnsweredAssumed Answered

Google claims FS, yet fails SSLlabs test?

Question asked by DirkPiraat on Sep 9, 2013
Latest reply on Sep 9, 2013 by Ivan Ristić

Based on this report: https://www.ssllabs.com/ssltest/analyze.html?d=google.nl&s=74.125.227.183, it seems that google.nl does not support ForwardSecrecy. However it seems that the required ECDHE-cipher suites are available.

 

The only possible reason I can come up with after some searching is that google is lacking in the handling of session tickets (http://www.ietf.org/rfc/rfc5077)

 

Is this a correct assumption or am I missing the point entirely?

 

Kind regards,

Dirk

Outcomes