New NSA Leak Shows MITM Attacks Against Major Internet Services

Re:New NSA Leak Shows MITM Attacks Against Major Internet Se... by __alexs on Friday September 13, 2013 @11:06AM (#6380935)

> Right now we need to find out which (root?) CAs are compromised by the NSA.

Given that basically all CAs people actually use (even in Europe) are owned by US companies, I would estimate something close to 100% of them have cooperated with the NSA at some point. Obviously there are non-US CAs like China's CNNIC but most of them won't actually sell you a certificate.

[ Parent | on HN ]

Re:New NSA Leak Shows MITM Attacks Against Major Internet Se... by Element_ on Friday September 13, 2013 @03:48PM (#6382671)

If the NSA is doing this "legally" via secret courts etc... Then you have to assume every company subject to US law can't be trusted.

[ Parent | on HN ]

Re:New NSA Leak Shows MITM Attacks Against Major Internet Se... by __alexs on Sunday September 15, 2013 @09:30AM (#6389013)

We already know that we can't trust most major US companies. What compromised CAs mean is that we also can't even trust non-US companies due to our dependence on US CAs for TLS to actually be usable.

[ Parent | on HN ]

Re:New NSA Leak Shows MITM Attacks Against Major Internet Se... by dsl on Friday September 13, 2013 @11:41PM (#6384565)

...and any CA outside the US is compromised by China, India, UK, etc.

[ Parent | on HN ]