HTTPS may be enough to hide from the trivial bulk collections, such as the infamous Folsom St. beam-splitter. If they are targeting and are willing to invest in

HTTPS may be enough to hide from the trivial bulk collections, such as the infamous Folsom St. beam-splitter. If they are targeting and are willing to invest in the time/effort to MitM your HTTPS connections, they will probably find a way anyway (QUANTUM has a lot of options, etc). Now, as you say, the "cooperating agreement" trick where they just strong-arm industry with a national security letter and personal threats against the CEO to force compliance is a much bigger problem, which really needs to be addressed. ASAP. /of course, then there are the companies that are collaborators... sigh