If the NSA can break encryption, they're probably only doing it for specific individuals they're interested in. And if the NSA is interested in spending resourc

If the NSA can break encryption, they're probably only doing it for specific individuals they're interested in. And if the NSA is interested in spending resources on you, specifically, you have a world of problems besides encryption: - Are you managing TEMPEST? Do you know what's on the other side of your walls? - Who else has an access card/PIN/key to get near your computer? Cleaning service? Custodians? Other tenants? - Are you running Windows? - Do you read and fully understand every line of code of every security patch all of the time? Do you compile them yourself? Because no matter how much you may believe in Linux, package maintainers and repository owners are still people who are subject the laws of a sovereign nation. - Do you trust your BIOS? Does your motherboard have Intel vPro or similar? - Is your Java out of date? - Where else have you used your password? - If you're doing anything other than Gmail via Chrome, do you check to make sure the SSL certificate is from the correct CA? Do you check it every time? - Do you know that everyone you ever communicate with is always perfectly on top of all of these (and other) potential vulnerabilities all of the time with no exceptions ever? If not, then it doesn't matter whether we can still trust encryption. Because we certainly can't (by default) trust endpoints.