2 ms·
The NSA almost certainly has a way to sign their own certificates that they use for MITM attacks. But that doesn't mean they gain anything from infiltrating a
by perlgeek 12y ago
The NSA almost certainly has a way to sign their own certificates that they use for MITM attacks.
But that doesn't mean they gain anything from infiltrating a large number of CAs; after all, those only sign certificates, not create the private keys.
- leccine 12y agoWell, the joke was about how useless is to start a new CA. The first member is going to be the government through a cover agency. Remember, making you believe that SSL makes your service secure is cheaper and better from the NSA point of view than having a huge cluster to crack the encrypted traffic.