> No amount of cooperation from Certificate Authorities will enable passive attacks on SSL Actually, it's quite common for CAs to do the site admins a favor an

> No amount of cooperation from Certificate Authorities will enable passive attacks on SSL Actually, it's quite common for CAs to do the site admins a favor and generate the keypair for them. The admin then downloads the private key and installs it on his server. On TLS connections where the client and server do not negotiate the use of Ephemeral Diffie-Hellman (EC)DHE (sometimes called EDH), then the CA could have retained the private key data which could be used to decrypt the packet capture after-the-fact. Google should be applauded for configuring their servers to prefer (EC)DHE on their TLS services. It also means they can fight a law enforcement subpoena for their private key.