Re:CloudFlare, PRISM, and Securing SSL Ciphers
by MertsA on Wednesday June 12, 2013 @05:33PM
(#5870907)
Well you would be right in terms of this working but if the NSA were doing this it would have been noticed. Also, that trick won't work when certificate pinning gets involved so going to Gmail in Chrome would pop up a warning message if they tried. Supposedly PRISM has access to Gmail so at the very least the NSA is doing something else in addition to selective SSL MITM attacks.
[ Parent
| on HN ]
There are no comments on this comment yet.