4 ms·
I'd really like to know whether Google shared its SSL/TLS certificates with government agencies. I asked the author (Yonatan Zunger) a short question and he rep
by jcrites 13y ago
I'd really like to know whether Google shared its SSL/TLS certificates with government agencies. I asked the author (Yonatan Zunger) a short question and he replied to say he doesn't know anything. I followed up with:
> It seems you care very much about user privacy:
>> I would no longer be working at Google [but for] the fact that we do stand up for individual users' privacy
> Will you be willing to find out whether Google has shared its SSL/TLS keys for public sites with government agencies? As a person interested in user privacy, I imagine this will be as of much interest as whether they have direct access to the data.
> As you mentioned, direct access would require Google to build something. Intercepting SSL/TLS traffic would not.
> If Google shared its SSL keys, then the NSA can intercept all inbound and outbound traffic, and would be able to capture virtually all Google user data. They can store the data and search it. They wouldn't particularly even benefit from direct access to Google's data, if they're planning to store it themselves anyway.
> I would be great to hear an affirmation from Google that it has not shared its encryption keys with governments.
I can't figure out how to link to my comment, but it appears in the comments on Yonatan Zunger's post. (See original post)