4 ms·
There’s a rabbit hole of what ifs one can descend down regarding this: - what if a nation state has access to a CA - what if a nation state creates a backdoor
by laumars 5y ago
There’s a rabbit hole of what ifs one can descend down regarding this:
- what if a nation state has access to a CA
- what if a nation state creates a backdoor in TLS and the pull request gets merged
- what if a nation state creates a backdoor in your OS
- what if a nation state creates a backdoor in your hardware
All are possible but more likely is they’ll just use their influence to grab your data directly from the service providers themselves. Eg Google / Microsoft / Meta / Apple etc.
You could get around it by self hosting and using PGP but one has to ask what your personal risk is. With greater security comes greater hurdles and inconvenience
- number6 5y ago> All are possible All happened already: 1) Hacked Mongolia CA 2) Dual_EC_DRBG 3) Eternal Blue 4) "NSA Interception In Action? Tor Developer's Computer Gets Mysteriously Re-Routed To Virginia" Ok technically not backdoors and most of them conspiracy myths. Yeah there is a lot out there to go deep down the rabbit hole
- wg0 5y agoConsider this - All download URLs of top browsers get intercepted first and the binary fixed binary response gets returned which is actually patched version of the browser (as most major browsers are open source) containing additional CAs to be trusted. From that point onwards, every HTTPS interaction is just plain text.
- angio 5y agoAren't CloudFlare and other CDNs an easy target for that? They have to decrypt and then re-encrypt all trafic going through them.
- arpa 5y agoTLS added/removed here :nsasmile: