3 ms·
> It is a low view of the NSA to think that they do not have the ability to real-time decrypt SSL certs from every major SSL cert authority. For most SSL certs
by kllrnohj 13y ago
> It is a low view of the NSA to think that they do not have the ability to real-time decrypt SSL certs from every major SSL cert authority.
For most SSL certs this is probably true, but Google uses perfect forward secrecy which makes this very unlikely if not damn near impossible: http://googleonlinesecurity.blogspot.com/2011/11/protecting-data-for-long-term-with.html http://googleonlinesecurity.blogspot.com/2011/11/protecting-...