2 ms·
> SSL certificate authorities are already entrusted with keys whose loss has just about the same sort of security implications as breaking messaging encryption
by cesarb 7y ago
> SSL certificate authorities are already entrusted with keys whose loss has just about the same sort of security implications as breaking messaging encryption might have.
A leak of the private key for a SSL certificate authority (or even for the server itself with modern TLS) doesn't allow decrypting past messages, while these backdoor proposals aim to allow precisely that.