2 ms·
You should beware, as GMail isn't an "encrypted service", only your communication with their servers is. This prevents MitM attacks from small adversaries, unti
by bad_user 11y ago
You should beware, as GMail isn't an "encrypted service", only your communication with their servers is. This prevents MitM attacks from small adversaries, until the government forces their own root certificate on every citizen that is. But given Google has business and representation in Europe, they are susceptible to governmental requests for mass surveillance (especially because of the good cooperation the NSA has with foreign intelligence agencies), plus for individuals (like specific enemies of government) all it takes is a subpoena.
- tankenmate 11y agoEven if the Govt forces their own certificates on people it won't work with modern browsers because they support certificate pinning (and hence will refuse to visit a site with the wrong CA). So then they'd need to force Govt browsers on people while also trying to censor browsers from the rest of the world. None of the above is viable in the short, medium or long term.
- ryanlol 11y agoI don't think any browser implements certificate pinning in such a manner.