I've noticed forge is missing a good chunk of TLS support by not having a DH implementation. I'd be willing to port in my Diffie-Hellman library (which hasn't seen much love for a while)! Thoughts?

I know it needs a lot of work, the actual implementation is sound but the key generation is a little crappy, I'd swap that out for Forges RNG and key generation algorithms anyway.