News for hackers. Stuff that matters.

A comment on NSA admits listening to U.S. phone calls without warrants. Parent comment

Re:NSA admits listening to U.S. phone calls without warrants by tptacek on Saturday June 15, 2013 @08:32PM (#5886803)
A huge portion of all Google Mail connections can't be MITM'd even if NSA has an SSL CA banked, because Google baked the identity of their public key into their browser (using public key pinning).

File that under "things you don't do if your goal is to cooperate with NSA surveillance", by the way.

[ Parent | on HN ]
Re:NSA admits listening to U.S. phone calls without warrants by marshray on Saturday June 15, 2013 @11:44PM (#5887372)
It would be possible to backdoor the SSL offload devices such that passively intercepted connections were decryptable.

The revelations of the past week seem to put this category of idea back on the map.

[ Parent | on HN ]