ISC2 CISSP Practice Question

TLS 1.3 indeed removes support for RSA key exchange to improve security. In previous TLS versions (1.2 and earlier), RSA key exchange allowed encrypted session keys to be transmitted directly to the server encrypted with the server's public key. This created vulnerability to passive decryption attacks, as anyone who later obtained the server's private key could retrospectively decrypt captured traffic. TLS 1.3 addresses this by mandating ephemeral key exchanges (like Diffie-Hellman) that provide perfect forward secrecy, ensuring that even if the private key is compromised in the future, previously recorded sessions cannot be decrypted. This removal of static RSA key exchange is a significant security improvement in TLS 1.3.