3 ms·
I wouldn't be surprised if the NSA has a "special" relationship with many certificate authorities that allows it to man-in-the-middle SSL.
by c0ur7n3y 13y ago
I wouldn't be surprised if the NSA has a "special" relationship with many certificate authorities that allows it to man-in-the-middle SSL.
- EthanHeilman 13y agoNot just the NSA, many companies can buy CA privledges from a CA. For instance trustwave used to sell this as a service so companies could watch their employees. http://www.eweek.com/c/a/Security/Mozilla-Asked-to-Revoke-Trustwave-CA-for-Allowing-SSL-Eavesdropping-545114/ http://www.eweek.com/c/a/Security/Mozilla-Asked-to-Revoke-Tr...
- sneak 13y agoIf they did any sort of active MITM like this, this would be incredibly easy to detect and would nearly instantly divulge their intercept operations. Have we learned nothing from their public history? They simply don't do shit like that.