Re:FOIA the PRISM tech stack
by Sami_Lehtinen on Friday June 07, 2013 @04:21AM
(#5837850)
No SSL/TLS, great job. Well, I assume AES crypto wouldn't bother them anyway. ;) Because it wouldn't be smart to make standard crypto which would blind them.
[ Parent
| on HN ]
Re:FOIA the PRISM tech stack
by damianball on Friday June 07, 2013 @05:00AM
(#5837950)
If I remember correctly, Verisign has indicated they would be willing to create a trusted root level certificate for the government to spoof the ssl of any domain... so I don't know if SSL is enough, unless you only allow CAs you've created or you trust.