4 ms·
How fucked is SSL?
- anologwintermut 13y agoGoogle actually has forward secrecy which prevents an attacker from doing anything passive even if they have google'e key. http://www.imperialviolet.org/2011/11/22/forwardsecret.html http://www.imperialviolet.org/2011/11/22/forwardsecret.html Of course, if they have access to google's servers(and can get the ephemeral keys) or can mount active attacks, this doesn't stop anything.