4 ms·
Looks like all it does is replace a SSL MITM proxy.
by Titanous 17y ago
Looks like all it does is replace a SSL MITM proxy.
- stcredzero 17y agoThe real bad guys can just use symmetric encryption, with keys distributed by mail or by hashing parts of certain books. It's the typical end-user going to their banking site or reading their email that's most vulnerable to such devices. China might be a top customer.
- Titanous 17y agoPublic-key encryption (such as PGP) would work as well.
- eru 17y agoOr rather Off-the-record messaging: You do not want deniability, and not leave provable traces.
- tptacek 17y agoIf the real bad guys are smart, they're just going to use SSL, with a single static private CA.
- agentq 17y agoWhat will end up happening to the 'real bad guys' http://xkcd.com/538/ http://xkcd.com/538/