3 ms·

Now that CloudFlare is a thing there is an incredible obvious way to snoop encrypted data..

• _8j50 5y ago
  Not really.. i mean to sites whose owners set them up with cloudflare... sure but cdns aren't knew. Akamai,fastly,etc... are a thing. But it's not that different than compromising could provider or server hosting providers. I think you misunderstand the purpose of dragnet, it is to identify targets of interest. Decrypting content is not needed, i mean it is desirable but even with sni encryption and DoH it is possible to identify targets of interest. Once identified,from what I have heard, they target your device or a common server targets of interest use, compromising those allows them to see much more than decrypted TLS. Since we are speculating, what makes you so sure submarine cable tapping spies that can compromise cloudflare (or coerce) cannot do the same with say... Let'sEncrypt's root signing keys? They don't even have to mess with CT logs that way. Unless you are sayinf the handful of private keys used to encrypt most TLS traffic are impossible to compromise, even with nation state resources.