MITM attacks aren't suitable for mass surveillance. All it would take is for a DDG employee to check the certificate from outside their network and the game wou

MITM attacks aren't suitable for mass surveillance. All it would take is for a DDG employee to check the certificate from outside their network and the game would be up. Not only would you know the NSA was using a MITM attack on a global scale, you'd have absolute proof of it. The NSA might be using a zero-day flaw to passively listen in on connections, but the possibility of this will diminish once the OCAP gets around to finishing its audit of OpenSSL.