> This would then enable a man-in-the-middle SSL attack. We know they are not doing this en-masse though. It would be noticed by now if they were. They undou

> This would then enable a man-in-the-middle SSL attack. We know they are not doing this en-masse though. It would be noticed by now if they were. They undoubtedly do it, but almost certainly only targeting individuals, or all users of obscure sites.