>How are they getting the DH keys without cooperation from at least one of the SSL endpoints involved? One possibility is to actually compute discrete logarith

>How are they getting the DH keys without cooperation from at least one of the SSL endpoints involved? One possibility is to actually compute discrete logarithms. Does anyone know what elliptic curve parameters Gmail uses for key exchange? If the parameters are large, it is not feasible to break discrete logs using known methods, but while I'm usually wary of claims that the NSA is miles ahead of the academic research community, I could perhaps believe they have faster algorithms for e.g. some NIST curves.