4 ms·
What would these vendors do if the US Government made a law requiring the USG receive all US CA private keys, or some other encryption backdoor? Would they be a
by peterwwillis 7y ago
What would these vendors do if the US Government made a law requiring the USG receive all US CA private keys, or some other encryption backdoor? Would they be able to put these kinds of changes in, or wouldn't that be circumventing the law?
- zifnab06 7y agoHandling over CA keys wouldn't allow them to mitm things - you'd need the server operators private key for that. This could allow them to issue new certs, but they'd have to be added to certificate transparency to be valid, and everyone would know rather quickly if they tried.