4 ms·
Compromising a CA doesn’t “get” you anything in the web PKI scheme: holding the CA’s private key doesn’t get you access to individual end entity keys, and issui
by woodruffw 3y ago
Compromising a CA doesn’t “get” you anything in the web PKI scheme: holding the CA’s private key doesn’t get you access to individual end entity keys, and issuing a new certificate with it loudly announces your presence due to CT.
Intelligence agencies are, in all likelihood, far more interested in obtaining individual end entity keys than they are in CAs.
- tialaramex 3y agoEven the end entity keys are rarely interesting. Increasingly they are signature keys, and so the only thing you can use those keys for is impersonation, which is cumbersome. What you want more often are session keys so that you can either listen in live (if you obtain in time) or decrypt a transcript later if you don't. Because this is passive it's harder to detect and easier to deny.