3 ms·
Doing that requires you to be able to see through at least some connections in the first place, in order to figure out which connections are from your target vi
by sievebrain 11y ago
Doing that requires you to be able to see through at least some connections in the first place, in order to figure out which connections are from your target victim. That's why QUANTUM is a combination of packet sniffing and packet injection. If everything is SSLd then it's much harder to deal with cases where a users connection moves around.
- chippy 11y agoI'm not familiar with reddit's set up. But given that a NSL means that anything and everything can be given over to the NSA by reddit, does this mean that it's not hard for them to do this now?
- sievebrain 11y agoOnly if they were able to get a direct tap of all traffic entering Reddit's servers inside AWS. Then SSL is irrelevant of course. Doesn't matter what keys or crypto you use. If it's not a direct real-time feed then, no, doesn't really change much.