News for hackers. Stuff that matters.

A comment on Microsoft acquires Github. Parent comment

Re:Microsoft acquires Github by dorkusmcgavin on Monday June 04, 2018 @01:31PM (#17230074)
Your intention is correct, but your details are not (as are the OPs). Microsoft share's it's SSL certs with the entire planet. Microsoft protects it's private keys and does not share them with the NSA.

The NSA forges Microsoft's SSL keys, they do not need to ask for them.

https://en.wikipedia.org/wiki/Flame_(malware)

Even with the mitigations provided by moving away from MD5, simple integration with a CA would be much more strategically beneficial.

[ Parent | on HN ]
Re:Microsoft acquires Github by lern_too_spel on Monday June 04, 2018 @02:26PM (#17230598)
Thanks. I skimmed GGP's comment and assumed it said something slightly more correct than what it actually said and then copy-pasted his error.

> Even with the mitigations provided by moving away from MD5, simple integration with a CA would be much more strategically beneficial.

Returning to the point, this attack would be unaffected by Microsoft purchasing anything.

[ Parent | on HN ]
Re:Microsoft acquires Github by dorkusmcgavin on Monday June 04, 2018 @02:42PM (#17230776)
> Returning to the point, this attack would be unaffected by Microsoft purchasing anything.

I was agreeing with you :)

[ Parent | on HN ]