News for hackers. Stuff that matters.

A comment on NSA admits listening to U.S. phone calls without warrants. Parent comment

Re:NSA admits listening to U.S. phone calls without warrants by kniht on Saturday June 15, 2013 @08:33PM (#5886809)
> provided they don't use cipher modes that provide forward secrecy

They use a PFS cipher spec: http://googleonlinesecurity.blogspot.com/2011/11/protecting-...

[ Parent | on HN ]
Re:NSA admits listening to U.S. phone calls without warrants by anologwintermut on Saturday June 15, 2013 @09:25PM (#5886993)
For HTTPS. I will bet you they don't use perfect forward secrecy for TLS with SMTP traffic. Not because they don't want to , but because it likely isn't supported for a huge set of the servers they connect to. A large number SSL terminators/ accelerators that e.g Microsoft uses, don't likely support it and who knows about other stuff.
[ Parent | on HN ]
Re:NSA admits listening to U.S. phone calls without warrants by X-Istence on Sunday June 16, 2013 @03:56AM (#5887809)
They do use PFS for TLS with SMTP traffic when the server on the other end supports it.
[ Parent | on HN ]