Yes. The NSA can go to any provider and say "We want your private cert. Also you're not allowed to tell anybody about this. Because terrorism." If your site i

Yes. The NSA can go to any provider and say "We want your private cert. Also you're not allowed to tell anybody about this. Because terrorism." If your site is externally hosted, they can go to your hosting provider and take your private cert without you ever knowing. This private cert will let them decrypt any TLS/SSL traffic they may have captured in the past.[1] They can also MITM any TLS/SSL connection if they have their hands in a single root CA.[2] [1]PFS can prevent this, but only Google and Bloomberg use it right now. See (http://en.wikipedia.org/wiki/Perfect_forward_secrecy http://en.wikipedia.org/wiki/Perfect_forward_secrecy). [2]Certificate pinning can prevent this, but only Google and MS use it right now. See (http://security.stackexchange.com/questions/29988/what-is-certificate-pinning http://security.stackexchange.com/questions/29988/what-is-ce...) and (http://tack.io/ http://tack.io/).