better comments

This commit is contained in:
nathan 2016-03-09 14:51:24 +01:00
parent a597768c20
commit 3d86c4d87d

View File

@ -260,8 +260,8 @@ class RegistrationRemoteHandlerClientTCP<C extends Connection> extends Registrat
return; return;
} }
// It is OK that we generate a new ECC keypair for ECDHE everytime that we connect. The server rotates keys every XXXX // It is OK that we generate a new ECC keypair for ECDHE every time that we connect from the client.
// seconds, since this step is expensive. // The server rotates keys every XXXX seconds, since this step is expensive (and the server is the 'trusted' endpoint).
metaChannel.ecdhKey = CryptoECC.generateKeyPair(eccSpec, new SecureRandom()); metaChannel.ecdhKey = CryptoECC.generateKeyPair(eccSpec, new SecureRandom());
// register the channel! // register the channel!