I need some clarifications on the DH implementation in OpenSSL. Currently I'm using version 1.0.2h 1) The wiki says don't use ADH, presumably because ADH provides encryption but not authentication and is exposed to man in the middle attacks. Is that the only reason? 2) Are the same encryption keys used every time with ADH? 3) Is it possible to use ephemeral DH without using certificates? I was not able to get that to work. 4) What is the best practice for establishing an anonymous encrypted channel using OpenSSL? Norm Green
