[l]Auch in Java kann man unsichere Software schreiben :-) Mein Lieblingszitat: "PureTLS does not generate S-G primes unless you tell it to explicitly because it makes prime generation is unbelievably slow in Java. So, my advice is to either use the supplied group (nothing wrong with this) or generate your own DH group using OpenSSL"