Re:Man jailed for over 5 years and fined $76K for selling VP...
by AgentME on Friday December 22, 2017 @02:23AM
(#15985814)
Most HTTPS connections use Forward Secrecy, so even if a government records an encrypted HTTPS connection and then later gets access to the private keys of the relevant TLS certificates, they still can't decrypt the recorded connection.
[ Parent
| on HN ]
Re:Man jailed for over 5 years and fined $76K for selling VP...
by stctgion on Friday December 22, 2017 @03:21AM
(#15986017)
It's still possible for the government to apply pressure so that ISPs man in the middle and force weaker ciphers that can be decoded after the fact
Re:Man jailed for over 5 years and fined $76K for selling VP...
by willstrafach on Friday December 22, 2017 @09:55AM
(#15987824)
They cannot force weaker ciphers. TLS specifically won’t allow it due to past attacks relying on this.