5 ms·
the document and translations are all very unclear and unprecise. Note that they would also claim that they can decode SSH, ie SSL.
by zobzu 13y ago
the document and translations are all very unclear and unprecise.
Note that they would also claim that they can decode SSH, ie SSL.
- dalai 13y agoThe translation is not too bad in this case and the PDF looks legit. Btw this is from 2012. The question was if the technology they have is capable of decoding encrypted transmissions (e.g. SSH or PGP). The reply was that in general yes, depending on the type and quality of the encryption. What I would note is that neither the question nor the reply are about a particular encryption technology. I would not take it to mean that they can decrypt PGP in general.
- fiber 13y agoThe answer is technically correct, if someone uses a weak enough cipher, they would be able to decode it. What else could they say? "We spend a lot of money on eavesdropping software, but really if people are encrypting their communication, it's all pretty useless."?
- glurgh 13y agoSSH is not 'ie SSL'.
- nickodell 13y agoBesides that SSL has CA's, what is the difference between SSH and SSL?
- glurgh 13y agoJust expanding the acronyms should give you a decent general idea - one is a 'secure shell' the other a 'secure socket layer'. For more details, it's pretty googleable.
- andrewflnr 13y agoBut aren't the encryption algorithms involved pretty similar? Public key exchange of symmetric keys for some well-known algorithm?
- jlgaddis 13y agoYes. For example, you can generate your own RSA private key (say, from the command line on a UNIX/Linux box). You can use that key and generate an "SSL certificate" and have it signed by a certificate authority (a "public" for-profit CA or your own private internal CA). You can use that same key with SSH for authentication. You can use that same key with GnuPG for e-mail signing and authentication.