The irony is that the product it's being plugged into is being issued by one of the companies at the middle of the PRISM thing and between the source code and t

The irony is that the product it's being plugged into is being issued by one of the companies at the middle of the PRISM thing and between the source code and the binary generation there is an unknown number of things that happen (please no-one spew the crap about Chrome being Chromium - it's not). Secondarily, the root CA's are an easy target for the NSA, so MITM/re-transmission time. And after all, those pesky terrorists are probably using pre-shared OTP's and any transport resulting in a completely secure channel anyway... It's all ridiculous.