Because this isn't really an attack per se. There are some interesting things in the paper, but really this is just low grade crypto being tolerated for far too

Because this isn't really an attack per se. There are some interesting things in the paper, but really this is just low grade crypto being tolerated for far too long in the name of compatibility. I finally found the Mozilla bug entry for this, they've known of it since 2010 when they raised the minimums to 512-bit DH groups. https://bugzilla.mozilla.org/show_bug.cgi?id=587407 https://bugzilla.mozilla.org/show_bug.cgi?id=587407