4 ms·

THE MAN in the middle

• tptacek 13y ago
  A huge portion of all Google Mail connections can't be MITM'd even if NSA has an SSL CA banked, because Google baked the identity of their public key into their browser (using public key pinning). File that under "things you don't do if your goal is to cooperate with NSA surveillance", by the way.
  • deleted 13y ago
    [deleted]
  • marshray 13y ago
    It would be possible to backdoor the SSL offload devices such that passively intercepted connections were decryptable. The revelations of the past week seem to put this category of idea back on the map.