3 ms·
Most HTTPS connections use Forward Secrecy, so even if a government records an encrypted HTTPS connection and then later gets access to the private keys of the
by AgentME 9y ago
Most HTTPS connections use Forward Secrecy, so even if a government records an encrypted HTTPS connection and then later gets access to the private keys of the relevant TLS certificates, they still can't decrypt the recorded connection.
- stctgion 9y agoIt's still possible for the government to apply pressure so that ISPs man in the middle and force weaker ciphers that can be decoded after the fact
- willstrafach 9y agoThey cannot force weaker ciphers. TLS specifically won’t allow it due to past attacks relying on this.
- AgentME 9y agoEveryone would notice if ISPs were man-in-the-middling their TLS connections because none of the TLS connections would work.