3 ms·
If they pull everything from undersea cables they must have all CA Certificates from all over the world to do the man-in-the-middle for encrypted connections..
by eik3_de 13y ago
If they pull everything from undersea cables they must have all CA Certificates from all over the world to do the man-in-the-middle for encrypted connections.. plausible?
- zby 13y agoThere is much information that is still unencrypted like unencrypted emails via standard SMTP or all the metadata for encrypted communications - like for example the list of websites accessed by a given IP.
- ars 13y agoNo, not plausible. A CA certificate would allow them to forge a website certificate (and pull off the MITM), but the website owner would still notice - they would see that the hash number of the certificate they installed doesn't match the one the browser is looking at. Most website owners would not notice, it's true. But some would.
- eik3_de 13y agoHow does this comparing of certificate hashes work? If the connection is plain text in the middle, can't the hash also be forged?
- MacsHeadroom 13y agoNot very likely. CA Certificate generation is about as secure as the papal election (read one of the most secure proceedings in existence). See https://www.youtube.com/watch?v=b9j-sfP9GUU https://www.youtube.com/watch?v=b9j-sfP9GUU