4 ms·
CAs aren't the only possible point of failure. Simply by obtaining private keys for Google/Facebook/YouTube/Yahoo/Baidu, the NSA can passively decrypt a HUGE p
by copsarebastards 12y ago
CAs aren't the only possible point of failure.
Simply by obtaining private keys for Google/Facebook/YouTube/Yahoo/Baidu, the NSA can passively decrypt a HUGE percentage of the world's traffic. Any server encrypting for Google will need to have these keys so it's quite difficult to keep all these servers secure, and given the keys' values, the NSA would have no trouble budgeting infiltrating companies to get them.
- davidgerard 12y agoAbsolutely, I was just giving one example.
- Sremobeekik 12y agoIt's' simple love. .m
- nullc 12y agoNot correct. Google-- and anyone else prudent-- uses a PFS ciphersuite. Only active attacks can be successful.