2 ms·
It would. That's what certificate pinning is for. If they did that and (ab)used it, they'd be found out in no time. This whole conversation is just not going a
by nothrabannosir 10y ago
It would. That's what certificate pinning is for. If they did that and (ab)used it, they'd be found out in no time.
This whole conversation is just not going anywhere. The Russian government can't snoop your tls data if it leaves the country, end of story. That's the reason for this law and the article to begin with!
- ryanlol 10y agoAs if, someone with such access would probably know better than to burn it by indiscriminately using it against connections with pinned certs. You aren't claiming that they couldn't compromise a CA, are you? That's pretty much the only thing that would make such an assumption unreasonable.
- nothrabannosir 10y agoEdit: I'll just stop here. Suffice to say we should talk this over another time, not in hacker news comments :)