I believe what he means is, SSL can help prevent unauthorized intrusion, but it does nothing for the security of your data against the government who can say "G

I believe what he means is, SSL can help prevent unauthorized intrusion, but it does nothing for the security of your data against the government who can say "Give us tptacek's data. You'll find our paperwork authorizing the request in proper order" I've been thinking a lot about whether a service could be created with encryption that prevents the holder of the data from reading it by offloading part of the key to the client. I think it could be done. Probably what would happen though is, as soon as it's implemented, the site would be treated in the same regard or worse than piratebay...