4 ms·
Against mass surveillance, yes. But if you become person of interest, there is strong possibility that they can do man-in-the-middle attack very easily (with c
by hannibal5 13y ago
Against mass surveillance, yes.
But if you become person of interest, there is strong possibility that they can do man-in-the-middle attack very easily (with certificates that don't give any alarms). They probably have stuff in major network hubs that can divert traffic trough their servers.
Remember how easily Nokia, Opera and Amazon are able to do MITM attack against phone users by running it trough SSL proxy (I think Nokia has stopped doing this). https://www.schneier.com/blog/archives/2013/01/man-in-the-midd_6.html https://www.schneier.com/blog/archives/2013/01/man-in-the-mi...
- nandhp 13y agoBut that's when using the Nokia, Opera, or Amazon browser. If you're worried about Nokia, Opera, and Amazon facilitating MITM attacks, they could also just program the browser with a secret NSA certificate authority.
- hannibal5 13y ago>they could also just program the browser with a secret NSA certificate authority. I strongly suspect that NSA don't have to do that kind of stuff that can be easily noticed. They just ask nicely from Symantec/Verisign to give them valid certificate. Or they already have common root certificates.
- bdamm 13y agoAnd if MITM attack isn't sufficient, they have the tools to simply penetrate your machine and/or the server. I agree with your main point.