4 ms·
It is impossible to do dragnet MITM undetected. The probability of a single target validating public keys is low, but if you try MITM`ing every connection, then
by gizmo686 12y ago
It is impossible to do dragnet MITM undetected. The probability of a single target validating public keys is low, but if you try MITM`ing every connection, then people will notice the public keys do not match.
- vilhelm_s 12y agoSure, I understand that. I'm saying, what if the NSA just started to MITM all connections, or a large fraction of them? It would be easy to notice that they were doing so, so we would detect that they are doing dragnet surveillance. But we already know they are, so it seems nothing much would change compared to the current situation.