[Ach] DH theory section

[Aaron Zauner]

Another thing to think about: We now do not have any recommendation regarding ECC DH groups. 
But we do ship configurations with ECDHe in there. Hm. This bothers me. The problem is I do not
feel comfortable to recommend any of the EC groups that can be found in the RFCs (i.e. that are in
fact implemented in TLS libraries). Should we mention that in the ECC theory part?

Aaron
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 1091 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.cert.at/pipermail/ach/attachments/20131226/7847ed2c/attachment.sig>