SSL/TLS Decryption—Perfect Forward
Secrecy (PFS) Ciphers
If you use the DHE or ECDHE key
exchange algorithms to enable PFS support for SSL decryption, you
can use a hardware security module (HSM) to store the private keys
used for SSL Inbound Inspection.
|