This "SSL Locksmith" software isn't really a top-secret NSA tool: http://www.accessdata.com/products/cyber-security/ssl-locksmith http://www.accessdata.com/prod

This "SSL Locksmith" software isn't really a top-secret NSA tool: http://www.accessdata.com/products/cyber-security/ssl-locksmith http://www.accessdata.com/products/cyber-security/ssl-locksm... It's a MITM solution that injects fake certificates, i.e. nothing groundbreaking and equivalent to compromised/corrupt CAs (which, as we know, exist and are able and willing to hand out fake intermediate certs etc. to rogue entities). The Whole CA ecosystem is broken and basically snake oil and pretty much everyone knows it.