3 ms·
If the NSA was using their own certificates to MITM all HTTPS traffic it would be easily noticed by security researchers. Its not like they obtain the private
by admax88q 7y ago
If the NSA was using their own certificates to MITM all HTTPS traffic it would be easily noticed by security researchers. Its not like they obtain the private keys of every US company. They'd have to make their own replacement certain for every site they wish to intercept. That could easily be noticed by security professionals and targeted companies by monitoring.
- nickysielicki 7y agoWhat about just for the Alexa 100?
- Filligree 7y agoFar too many people would be able to notice. Someone in one of the companies would whistleblow.
- 24gttghh 7y agoBut would they? The Snowden leaks were 6 years ago. I am assuming the government didn't just throw up their hands and give up after that... edit: not to say they are specifically MITM'ing HTTPS widescale.
- austinheap 7y agoThere are a lot easier ways to exfiltrate data than wholesale breaking TLS encryption and MITM'ing 295+ tbps of domestic traffic. That said, every super power is working on better decryption capabilities.
- admax88q 7y agoEvent just a single site from the alexa 100 would be too obvious. I'm sure some security researchers and/or companies are already monitoring the certificates issued from major websites for abnormalities.