3 ms·
If they NSA could coerce a CA into sharing the key, they could make less detectable MITM attacks. So when you look at the chain you see: Verisign (lol j/k rea
by jiggy2011 13y ago
If they NSA could coerce a CA into sharing the key, they could make less detectable MITM attacks.
So when you look at the chain you see:
Verisign (lol j/k really the NSA) -> Site cert
Rather than:
Verisign -> Third party CA (suspicious) -> Site cert
If you pinned the site certs you should be able to defeat both of these.
- 23david 13y agowhy couldn't they coerce all CA's into sharing the keys?
- antocv 13y agoThey can and they most probably have done that. Even Iran and China did it, stole root CA private keys, kind of sloppy because we know. Coercion by legal means, moles or good old hacking or planting bugged hardware in the targets system and extracting private keys. Its within the realms of NSA, remember, they have the capability to make their own processors.