Question

A financial services company is redesigning the TLS configuration for its customer-facing web portal. The security architect wants to ensure that even if the server's long-term private key is compromised in the future, previously captured encrypted session traffic cannot be retroactively decrypted. Which configuration decision most directly achieves this requirement?

Accepted Answer

Enforce cipher suites that use ephemeral Diffie-Hellman (ECDHE) key exchange and disable static RSA key exchange

Answer

Increase the RSA server certificate key length from 2048 to 4096 bits

Answer

Enable HTTP Strict Transport Security (HSTS) with a long max-age directive

Answer

Deploy certificate pinning in the mobile and web clients to prevent rogue certificate use