> Am I missing something or is there a way to turn a spoofed certificate into a single-click pwn? 1) if there's a bug in the crypto library that creates RCE 2)

> Am I missing something or is there a way to turn a spoofed certificate into a single-click pwn? 1) if there's a bug in the crypto library that creates RCE 2) if a mitm delivers a payload to an application (browser/plugin/etc) and that causes RCE. The former might cause NSA to get its panties in a wad. But it might be much worse than RCE. It might be like Heartbleed, where it can leak key material and memory all day (on servers and clients) and you'd never know it because the leak leaves no trace on the system and just looks like normal requests. Perfect exploit for spying. (And of course it's possible they had that exploit in their back pocket, but someone else reported it to M$, so now they're CYAing)