News for hackers. Stuff that matters.

A comment on “100 spies” will monitor all SMS and email that goes in and out of Norway. Parent comment

Re:“100 spies” will monitor all SMS and email that goes in a... by sametmax on Tuesday February 05, 2019 @03:52PM (#19089729)
Like most gov, they probably have access to a root CA and they MITM.
[ Parent | on HN ]
Re:“100 spies” will monitor all SMS and email that goes in a... by Ajedi32 on Tuesday February 05, 2019 @04:24PM (#19089980)
There are currently no publicly trusted CAs participating in such a scheme. If there were, it'd be trivially detectable due to the millions of fraudulent certificates showing up in Certificate Transparency logs.
[ Parent | on HN ]
Re:“100 spies” will monitor all SMS and email that goes in a... by trumped on Tuesday February 05, 2019 @09:06PM (#19092065)
Of course they won't tell you that they are doing it...
[ Parent | on HN ]
Re:“100 spies” will monitor all SMS and email that goes in a... by Ajedi32 on Wednesday February 06, 2019 @11:25AM (#19096487)
They _have_ to tell you, there's no alternative option. If they don't publish the certs in multiple logs, then they aren't considered valid by browsers.
[ Parent | on HN ]
Re:“100 spies” will monitor all SMS and email that goes in a... by ahje on Tuesday February 05, 2019 @04:24PM (#19089977)
Didn't a new Norwegian CA offer free https certs a while back? </tinfoil>
[ Parent | on HN ]