Forum Discussion
Deltavista_1797
Nimbostratus
NimbostratusDHE key exchange: why is ephemeral key only 1024bit long?
Hello,
during a recent analysis comparing security options provided by Apache httpd and F5 LTM we discovered that while Apache for RHEL/CentOS has lifted a limitation of 1024 bits for ephemeral ...
Joe_MNimbostratus
NimbostratusI contacted F5 support to have this RFE pushed and this is the unfortunate response I got back.
I wanted to update you that I have heard back regarding your request and it was unfortunately denied. The recommendation they provided is completely disabling DHE, and using ECDHE instead. Also, I reviewed the links that you sent me and we actually have official documentation regarding logjam now that went up on Sunday. You can review that information at the link below.
https://support.f5.com/kb/en-us/solutions/public/16000/600/sol16674.html