2 ms·

I very much doubt the claims are as narrowly scoped as that. As you say, it's either imprecise journalism or merely repeating the reports of people who are (by

by sowbug 10y ago

I very much doubt the claims are as narrowly scoped as that. As you say, it's either imprecise journalism or merely repeating the reports of people who are (by definition) terribly confused about what's going on. By the way, I wouldn't call these people technically illiterate. The way you're using that term sets a bar so high that it includes almost everyone. If many people were at that level of technical literacy, we wouldn't have needed HSTS in the first place.

tonyarkles 10y ago
You folks are talking about HSTS and Browsers, but with phones there's a quite simpler attack vector for grabbing email credentials: IMAP. If the FBI has a certificate for imap.gmail.com that is signed by a CA, they can MITM that route. Even for my 2FA GMail setup (where each non-2FA enabled app gets an app-specific password), doing IMAP MITM will get the app-specific password, which would enable further IMAP access.