Topic

Configuring Transport Layer Security

Applicable to

all

History

Priority

should

Mar 2022

DH or ECDH is used for key establishment of TLS connections.

Miscellaneous changes were made to rationale and recommendations throughout the publication to clarify content without changing intent. This included a review from the Guidelines for System Hardening chapter through to the Guidelines for Data Transfers chapter.

2015

Agencies should use DH or ECDH for key establishment.