3 ms·
Then the US could have simply moved up to asking for the private key to the wildcard certificate or certificate authority to do the requisite MITM.
by cbhl 13y ago
Then the US could have simply moved up to asking for the private key to the wildcard certificate or certificate authority to do the requisite MITM.
- deepinsand 13y agoTrue, but presumably that would have been unconstitutional. As it was implemented, the only option they had was to demand Lavabit's private key, since they use the same SSL cert per user.