3 ms·
We already know that these agencies carry out real mitm attacks on users regularly. We already asked them pointed questions as to why they do this. The reality
by __alexs 12y ago
We already know that these agencies carry out real mitm attacks on users regularly. We already asked them pointed questions as to why they do this. The reality is that they don't care yet. They have near complete legal freedom to carry out these attacks.
Maybe OE would raise more eyebrows? I don't really think anyone will even care if the NSA are caught spying on your cobbled together private Web mail server. The applications that OE will be deployed on just aren't politically sensitive enough IMO.
I don't think OE will likely make anything worse. I just don't think it will actually achieve anything. I'm certainly not going to tell someone who can't use a CA cert not to deploy it though.