3 ms·
Right, but the CA in that scenario has their own private key. If the private key for say Verisign was shared with the NSA, then the NSA would be able to MITM an
by jiggy2011 13y ago
Right, but the CA in that scenario has their own private key. If the private key for say Verisign was shared with the NSA, then the NSA would be able to MITM anybody using a cert that appeared to come from verisgn.
- blibble 13y agothey wouldn't share their key, the complicit CA would generate a certificate for a key generated by the NSA with the CA capability bit enabled. the NSA could then can use that to MITM sites without explicit pinning.
- jiggy2011 13y agoIf they NSA could coerce a CA into sharing the key, they could make less detectable MITM attacks. So when you look at the chain you see: Verisign (lol j/k really the NSA) -> Site cert Rather than: Verisign -> Third party CA (suspicious) -> Site cert If you pinned the site certs you should be able to defeat both of these.
- 23david 13y agowhy couldn't they coerce all CA's into sharing the keys?
- antocv 13y agoThey can and they most probably have done that. Even Iran and China did it, stole root CA private keys, kind of sloppy because we know. Coercion by legal means, moles or good old hacking or planting bugged hardware in the targets system and extracting private keys. Its within the realms of NSA, remember, they have the capability to make their own processors.