2 ms·
Couldn’t those root CAs also be used to handle end-to-end encryption for your 2FA codes?
by mikeash 8y ago
Couldn’t those root CAs also be used to handle end-to-end encryption for your 2FA codes?
- Thorrez 8y agoYeah I think you're right, a form of end-to-end wouldn't be too hard. But it would only protect against passive attacks by your provider. It wouldn't protect against active attacks by your provider. Your provider could issue itself a new cert for you and your correspondent and then intercept the messages. It's certainly an improvement over what we have now though.