Forum

Take a look at the new google policy of forward secrecy.

http://googleonlinesecurity.blogspot.com/2011/11/protecting-data-for-long-term-with.html

Maybe a good discussion for the folks at PolarSSL and Hiawatha.

http://en.wikipedia.org/wiki/Perfect_forward_secrecy

I do not think there is a rush for this, but something to consider for 2014

marco

PolarSSL already supports PFS.

how do we configure hiawatha to take advantage of this?

Or more to the point, what do I have to do with my SSL certificates and hiawatha.conf to enable it and utilize it?

Nothing. Hiawatha already prefers the strong ciphers. Whether they are used or not depends on what the client supports. Which cipher will be used is determined during the SSL handshake.