> I've not seen any evidence of MITM attacks by ISPs since snowden. [1] There is evidence GCHQ are doing attacks on HTTPS via UK ISPs pre-snowden, post-snowden

> I've not seen any evidence of MITM attacks by ISPs since snowden. [1] There is evidence GCHQ are doing attacks on HTTPS via UK ISPs pre-snowden, post-snowden what does it matter? There is no evidence they have stopped. [2] The Investigatory Powers Act legalizes the governments use of this technology. If you are going to argue that they no longer have this capability or Snowden made it all up Im gonna need some sources. > Unless the UK government has cracked all the ciphers used by HTTPS + VPNs and have backdoored every CA You don't need to hack all the things you just need to hack like 95% of the things and [1] is evidence GCHQ have that. I mean I guess you can say "yea but im in that 5% the system works!" while GCHQ work to close the gap. I mean just read some of the stuff GCHQ do: https://theintercept.com/2015/09/25/gchq-radio-porn-spies-track-web-users-online-identities/ https://theintercept.com/2015/09/25/gchq-radio-porn-spies-tr... [1] https://www.theguardian.com/world/2013/sep/05/nsa-gchq-encryption-codes-security https://www.theguardian.com/world/2013/sep/05/nsa-gchq-encry... [2] https://www.libertyhumanrights.org.uk/human-rights/privacy/snoopers-charter https://www.libertyhumanrights.org.uk/human-rights/privacy/s...