Worth noting: Having the private keys for all the CA's in the world just means that they could launch a man-in-the-middle attack against a secure service. (Whic

Worth noting: Having the private keys for all the CA's in the world just means that they could launch a man-in-the-middle attack against a secure service. (Which would be easy for a rudimentary traceroute to detect.) Not that they could decrypt SSL traffic talking directly to my server, for example. The susceptibility to this kind of attack is a big part of the knock that a lot of people have against HTTPS. It's generally been ignored as "too hard to pull off" - but it's also generally been assumed that your own government won't bother recording your communications without probable cause. Anyway, unless they were targeting a specific service (which they usually aren't, they usually target a person) it would require too much effort to set this up for all the secure services they use.