In reply to CRP.

Glad you found this blog post useful, and thanks for taking the time to provide feedback on it !

Both statements are correct. TLS doesn't define neither key exchange, nor encryption protocols - it relies in existing ones. So TLS, as an example, may use DH and RSA for key exchange, RC-4, AES and DES for encryption, SHA-1, MD5 and others for hashing, etc. Using a car analogy - the mechanic may tell you "We found you were using an air filter too small for your car, and we also found a design problem in the fuel injection system.". The air filter (DH) is one of the component in your car's (TLS) injection system (cipher suite negotiation).

Hope this helps ! :)