Study. uk . com
  1. Home
  2. All questions
  3. Question 393

CompTIA Security+ study material · question 393 of 611

Why does every TLS 1.3 handshake provide forward secrecy?

  1. Because static RSA and Diffie-Hellman key exchanges were removed
  2. Because compression was removed
  3. Because the handshake completes in one round trip
  4. Because session tickets are disabled
Show the answer

Answer: A. Because static RSA and Diffie-Hellman key exchanges were removed

With only ephemeral key exchange available, recorded sessions cannot be decrypted later using the long-term key.

Source: RFC 8446 (IETF) — RFC 8446 § 1.2 Major Differences from TLS 1.2

Challenge yourself on this topic → Study as cards