3 ms·

thanks, existing traffic is symmetrically encrypted already and can no longer be decrypted by the intercepting party. But future traffic could be. For instance,

thanks, existing traffic is symmetrically encrypted already and can no longer be decrypted by the intercepting party. But future traffic could be. For instance, I found this : https://www.princeton.edu/~pmittal/publications/bgp-tls-usenix18.pdf https://www.princeton.edu/~pmittal/publications/bgp-tls-usen...

arlort 3y ago
Ok, yeah, I hadn't thought about the certificate issue phase, though that's a different concern than what you talked about initially. The victim in the paper you mention aren't users but rather the CAs themselves (though the certificates issued can then be used against users)