New NSA Leak Shows MITM Attacks Against Major Internet Services

Re:New NSA Leak Shows MITM Attacks Against Major Internet Se... by vabmit on Friday September 13, 2013 @03:46PM (#6382658)

Didn't Assange say in a (secretly?) recorded video where he was talking with Schmidt and another person that while the Americans got trusted root keys from Diginotar, the Chinese hacked Verisign and grabbed their root keys? I'll see if I can find the video.

[ Parent | on HN ]

Re:New NSA Leak Shows MITM Attacks Against Major Internet Se... by socillion on Saturday September 14, 2013 @12:57AM (#6384708)

Great tip! It's not exactly what you laid out, but here's the interview you're probably thinking of (ctrl+f verisign): http://wikileaks.org/Transcript-Meeting-Assange-Schmidt

Quoting Julian Assange: I have been told actually that VeriSign... has actually given keys to the US government. Not all, but a particular key.

Very interesting.

[ Parent | on HN ]

Re:New NSA Leak Shows MITM Attacks Against Major Internet Se... by pflanze on Saturday September 14, 2013 @09:54AM (#6385544)

I don't get why everybody talks about Verisign or others giving them "keys". The NSA just need certificates for their own key, right? The only private key that Verisign could give them would be their signing key, which seems much too powerful and central for a signing authority to hand out.

[ Parent | on HN ]