From: Nikos Mavrogiannopoulos Date: Mon, 1 Dec 2003 08:56:22 +0000 (+0000) Subject: *** empty log message *** X-Git-Tag: gnutls_1_0_0~6 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=7e86c78fb8ead1905aa56a2ba8b03375feb2046c;p=thirdparty%2Fgnutls.git *** empty log message *** --- diff --git a/doc/tex/ciphersuites.tex b/doc/tex/ciphersuites.tex index 979cfb4479..4899f59b0c 100644 --- a/doc/tex/ciphersuites.tex +++ b/doc/tex/ciphersuites.tex @@ -26,6 +26,9 @@ in appendix \ref{ap:ciphersuites} on page \pageref{ap:ciphersuites}. \gnutls{} will disable ciphersuites that are not compatible with the key, or the enabled authentication methods. For example keys marked as sign-only, will not be able to -access the plain RSA ciphersuites, but only the DHE\_RSA ones. +access the plain RSA ciphersuites, but only the DHE\_RSA ones. It is +recommended not to use RSA keys for both signing and encryption. If possible +use the same key for the DHE\_RSA and RSA\_EXPORT ciphersuites, which use signing, +and a different key for the plain RSA ciphersuites, which uses encryption. \addvspace{1.5cm}