4 ms·
These kind of master keys already exists so it is not something hypothetical. I am talking about the private keys of trusted root certification authorities. If
by Scea91 11y ago
These kind of master keys already exists so it is not something hypothetical. I am talking about the private keys of trusted root certification authorities. If it would be as easy to get them as you say nobody would probably use TLS since it would be useless.
- mirimir 11y agoWell, TLS with "trusted" CAs is useless, for extreme threat models.
- csallen 11y agoCare to elaborate?
- mirimir 11y agoYou're vulnerable to MitM if adversaries have issued fraudulent certificates for sites that you use. And we know that this has happened, more than once.
- facetube 11y agoAnd that'll only get worse if the FBI succeeds in compelling a US technology company to sign something they don't trust.
- rqebmm 11y agoI think the point is that it's easier to spoof a trusted cert than to crack the encryption
- syncsynchalt 11y agohttp://thenextweb.com/insider/2015/04/02/google-to-drop-chinas-cnnic-root-certificate-authority-after-trust-breach/#gref http://thenextweb.com/insider/2015/04/02/google-to-drop-chin... it's not tinfoil to note that there are CAs under the control of authoritarian governments.