This assumes the NSA don't have a root CA they can use to man in the middle SSL - an assumption that seems unlikely, given other well-publicised breaches of CA'

This assumes the NSA don't have a root CA they can use to man in the middle SSL - an assumption that seems unlikely, given other well-publicised breaches of CA's: http://www.pcworld.com/businesscenter/article/249510/trustwave_admits_issuing_maninthemiddle_digital_certificate_mozilla_debates_punishment.html http://www.pcworld.com/businesscenter/article/249510/trustwa... http://www.schneier.com/blog/archives/2010/04/man-in-the-midd_2.html http://www.schneier.com/blog/archives/2010/04/man-in-the-mid... http://www.darkreading.com/authentication/167901072/security/attacks-breaches/231600498/digital-certificate-authority-hacked-dozens-of-phony-digital-certificates-issued.html http://www.darkreading.com/authentication/167901072/security... http://betanews.com/2010/03/25/has-ssl-become-pointless-researchers-suspect-state-sponsored-ca-forgery/ http://betanews.com/2010/03/25/has-ssl-become-pointless-rese... http://lwn.net/Articles/372264/ http://lwn.net/Articles/372264/ http://blogs.cisco.com/security/black_hat_usa_2009_summary/ http://blogs.cisco.com/security/black_hat_usa_2009_summary/ ... etc