> Note that DuckDuckGo doesn't use Diffie-Hellman for its key exchange,
Source?
Source?
Do you have examples for secure site (under this aspect) and background info?
eta: You also asked for background info. It's been discussed on Hacker News recently: http://en.wikipedia.org/wiki/Perfect_forward_secrecy
You are right about google.com, the others still use RSA.
Thanks for the background info. Maybe SSLLabs should take this into account when doing their tests. Until now they make no difference between DH and RSA.