The NSA still has plenty of options. First is an undisclosed RCE in your SSL implementation. If they don't have an 0day handy, they can compromise any server yo

The NSA still has plenty of options. First is an undisclosed RCE in your SSL implementation. If they don't have an 0day handy, they can compromise any server you would visit. They can hijack a web server to inject the payload, they can steal the certificate and then MitM anywhere on the path. They can create a malicious ad with the payload, targeted towards you. They can get their hands on a valid certificate for a site you commonly visit, by using a CA that doesn't properly check these things, either through a vulnerability, social engineering, forgery, or coercion. And of course there's always spear phishing. They don't need to get credentials, just get you to click the link.