Denial of service, metadata extraction, easy path to mitm if there's a zero day. Those are just a few attacks possible without decrypting payloads. If I gave yo

Denial of service, metadata extraction, easy path to mitm if there's a zero day. Those are just a few attacks possible without decrypting payloads. If I gave you a root CA's private key and my ip address you would not be able to mitm me unless you found a way to inject yourself in my datapath. Good luck with that unless you have nice backdoors to core infrastructure.