TLS has been subject to a lot of attacks: http://en.wikipedia.org/wiki/Transport_Layer_Security#Attacks_against_TLS.2FSSL http://en.wikipedia.org/wiki/Transpor

TLS has been subject to a lot of attacks: http://en.wikipedia.org/wiki/Transport_Layer_Security#Attacks_against_TLS.2FSSL http://en.wikipedia.org/wiki/Transport_Layer_Security#Attack... Plus, since the whole thing is based on CAs, if you can get an intermediate cert (and does anything think the NSA can't?) and you have the means to MITM someone, that's as good as breaking it, too. 15 years ago, we were using keys with much lower entropy, as well, which may have simply been outpaced by computing power.