3 ms·

> Right now we need to find out which (root?) CAs are compromised by the NSA. Given that basically all CAs people actually use (even in Europe) are owned by US

by __alexs 13y ago

> Right now we need to find out which (root?) CAs are compromised by the NSA. Given that basically all CAs people actually use (even in Europe) are owned by US companies, I would estimate something close to 100% of them have cooperated with the NSA at some point. Obviously there are non-US CAs like China's CNNIC but most of them won't actually sell you a certificate.

Element_ 13y ago
If the NSA is doing this "legally" via secret courts etc... Then you have to assume every company subject to US law can't be trusted.
- dsl 13y ago
  ...and any CA outside the US is compromised by China, India, UK, etc.
- __alexs 13y ago
  We already know that we can't trust most major US companies. What compromised CAs mean is that we also can't even trust non-US companies due to our dependence on US CAs for TLS to actually be usable.