4 ms·

I’m having a hard time parsing that. Are you suggesting that PCC specifically is sending things in plaintext, or that the security promises in the server and a

by brookst 4mo ago

I’m having a hard time parsing that. Are you suggesting that PCC specifically is sending things in plaintext, or that the security promises in the server and arch are false, or that a compromised CA means… IDK what? I’m with you on the big principles, but are you implying more specific attack vectors or just kind of maybe everything could be compromised somehow?

TalkingCodeMonk 4mo ago
> In an NSA presentation slide on “Google Cloud Exploitation,” however, a sketch shows where the “Public Internet” meets the internal “Google Cloud” where their data reside. In hand-printed letters, the drawing notes that encryption is “added and removed here!” http://web.archive.org/web/20140101231153/https://www.washingtonpost.com/world/national-security/nsa-infiltrates-links-to-yahoo-google-data-centers-worldwide-snowden-documents-say/2013/10/30/e51d661e-4166-11e3-8b74-d89d714ca4dd_story.html http://web.archive.org/web/20140101231153/https://www.washin... https://blog.cryptographyengineering.com/2013/09/06/on-nsa/ https://blog.cryptographyengineering.com/2013/09/06/on-nsa/
- brookst 4mo ago
  So still just innuendo, nothing specific to how PCC works?