Diffie-Hellman is a key exchange method that allows two parties to establish a shared secret over an insecure channel. DH does not itself provide authentication, so it is typically combined with certificates or signatures to prevent man-in-the-middle attacks.
